I remember my father was very impressed with the orginal ALTAIR BASIC, mainly by the fact that it did run in 4K, and still leave (albiet) small amount of room for the program code
He spent some time looking at a disassemble of it and told me the garbarge collection on it was stupid, it was bassicly brute force or some such thing.
thanks all i know, I didn't get into the scene until C64 BASIC.
One of the things that stood out when I took figure drawing class, was to try to make part of the image "wrong", do something that annoys the viewer. it will keep him or her glued to it, intrigued. Sense then, I've always had some admiration for works that explicitly try to annoy you in some way. usully it's more suttle. Annoy.com is REALLY annoying. it's blinks, it shouts furphanitys, and it's crawling on IIS 4 due to./.
Would i say annoy.com is art? as much as it bothers me i have to say yes. it will be hard for me to forget that site, it HAS effected me somehow, i didn't like it, but it has changed me. i'm a different person for clicking on that link (ok maybe this is going to far).
Despite this sentiment, however, OpenBSD seems to be doing quite well....
i I think OpenBSD doesn't cracked much because no-one actually runs it. it's "that really secure OS", but we need mainstream software to run on our OS, so we're going to use FreeBSD or Linux.
MacOS is also revered to be to secure the DOD, It's security through obscurity.
Now Perens has ruled, or should one say opined, that Sun is perfectly within its legal rights - not that he particularly likes it. He cites exceptions in the GPL allowing for Sun's ported drivers "as long as the drivers are runtime loading and are not distributed with the kernel."
Becker argues the exceptions were intended for user-level programs, not drivers that send threads into the kernel.
"Yes, that is how it was intended, but that's not what it says," Perens replies. In other words, a hole in the license.
In e-mail exchanges with Becker (provided to us by the participants, not obtained surreptitiously), Perens added that "We both know that the GPL was not intended to allow this use. Unfortunately, the language of the GPL does allow it."
Neither Perens nor Becker has suggested how the GPL could, or should, be changed. But Becker knows one thing - he wants Sun to stop peddling the kit, which he says includes "explicit instructions on taking a copyrighted work and converting it to unlicensed use with the Solaris operating system."
It seems the two closest to the issue disagree with you. I don't really understand the whole thing myself. No offence, but I would take these two's word over yours.
I'm aware of the differnce between the term CODEC (compression decompression) and file formats. I didn't think I seemed confused in the matter.
-Jon
btw: MP3 is MPEG 2 (or MPEG 2.5) audio layer III, not MPEG 1, i have no clue what audio compression MPEG 1 uses, i imagine it's just RLE PCM or something else as gay.
Microsoft did the world a grande disservice by deciding that no, threads of execution did not need to be firewalled off from each other so that stray pointers could not crash the entire system, let's run them all in the same memory space!
I really don't get this. Your talking about Win95 right? Linux can't hold a candle to NT's threading.. Anyway besides trashing Microsoft, I hope you relies the Microsoft's modal of software development is the more modular then any other company/group has ever created. Everything in windows is modular, I could re-write the spell checker for Word, or use Words spell checker from a webpage.
If someone *couldn't* understand your design you probably haven't designed to many programs. Anyone who's been around the ropes a few times knows to avoid overly complex designs, make components that have lose coupling and not to write threads that fuck up the OS. I used to work with this guy who was VERY bright, and a great coder. He was designing our new system. his initial idea's we're good, but he quickly fell into the trap over designing and completing the system. a few weeks later we got some more devs who after 2 weeks still couldn't understand the design.
About a month later the project got crapped. after our project leader quite, and the new manger (guess what) couldn't understand the design.
btw: this guy had never designed a program before.
-Jon
Re:A better place to get Slashdot info...
on
Kuro5hin Update
·
· Score: 1
Don't you worry about getting in trouble with Andover/CmdTaco about ripping off thier content?
-Jon
One the best places to get all this stuff is right here
besides that id like to mention that people should be way more exsited about this. people don't seem to relize that in about 2 years the MPAA is going to totally freak out because napster-forvideo will have every freaking movie and video for download.
that and your 2.5ghz computer can record a whole movie to a tiny 700megs on your 2.5 terrabyte drive.
think about it!
-Jon
oh ya, Tom didn't mention that DiVX is the actually Microsoft MPEG v4, just cracked to remove the copyright stuff. how they got hold of it, i can't tell you. also Microsoft and Real seem to have slightly better codecs now, Microsoft Video V7 (why 7?,marketing) and Real 8, both are REALLY freaking amazing. even better then standard MPEG4, which as someone pointed out is bassicly Quicktime, which uses the sorenson codec. Not that Quicktime isn't da shit, it is.
this is freakin stupid. Every company and there MOM has banner adds that do the same freakin thing! if you don't like microsoft getting a little ++ on there counter for when you go to CNN, just remove the freakin bookmark and put it in yourself. jezzus!
I HATE to remind you morons but Microsoft Is a COMPANY, company's exists to make MONEY. If MS can make a few extra million from this more power to them.
What about the banner add on top of slashdot?? you think it doesn't check a counter somewhere? for gods sake you people are being incredibly obtuse.
We also wanted you to know that if we conduct any price tests in the future, all customers who order items affected by these tests will automatically be refunded any price difference at the conclusion of the test, thereby ensuring that they will pay the lowest available price
But ignoring a ruling and deciding something is legal because you believe it won't fly.
Ya, actually it will. Not in princable, but in pratice yes. There really isn't anything the courts police of FBI can do about it, people HAVE DeCSS, they have napster, Gnutella, and all the others. It doesn't matter what this or that judge say. it's not going to change anything, in pratice at least.
Most of the time there not directed at me, so i injoy watching the exchange, it's intertaining. However if someone really did have it out for me, i can understand how this might come in use.
But how well will it really work? Remember that bullshit a while back about the comapny that had the "porn detection" app, the one that looks at photos and can tell if it has a nipple in it? ya, like that worked.
Id like to see how well it works on, say..
No, fuck you man. I'm going to come over to your house and kill your dog, but first i'm going to rap your girlfriend and piss in your mouth! You cock sucking fag!"
no offence of course, i'm just trying to think of how it could know with out a doubt this is flame mail. I mean what if it said...
No (way), fuck you (that dude). I'm going to come over to your house (help) you (feed) your dog, but first i'm going to (help) you kill the borden your girlfriend (is giving you), and (clean) your (toilet)! You cock sucking fag!, (hehe)"
maybe that one is too easy. but anyway, i don't really trust a computer to understand the "meaning" of any of this, and i have doubt any system is going to figure it out.
Foveon Inc., a closely held company in Santa Clara, Calif., plans to announce Monday that it has set a new image standard for sensors constructed using a production process known as CMOS, for complementary metal oxide semiconductor.
+film costs +it costs me about 10 bucks to develop a roll of film @ riteaid
+you forgot that while scanning is good quality, YOU have to scan in all those images, crop the edges, remove artifacts, etc.. i don't know about you, at my hourly rate I would save money getting a digital camera after about one: buy film, get film developed, scan in 36 images session.
oh, and here's the whois..
[root@bigfreak bounce]# whois fuckedcompany.com
Whois Server Version 1.3
Domain names in the.com,.net, and.org domains can now be registered
with many different competing registrars. Go to http://www.internic.net
for detailed information.
Domain Name: FUCKEDCOMPANY.COM
Registrar: TUCOWS.COM, INC.
Whois Server: whois.opensrs.net
Referral URL: www.opensrs.org
Name Server: DS1.VIRTUALSCAPE.COM
Name Server: DS2.VIRTUALSCAPE.COM
Updated Date: 26-jun-2000
>>> Last update of whois database: Mon, 11 Sep 2000 04:45:28 EDT
The Registry database contains ONLY.COM,.NET,.ORG,.EDU domains and
Registrars.
Registrant:
PK Interactive, Inc.
5 West 31st Street 7th Floor
New York, NY 10001
US
Domain Name: FUCKEDCOMPANY.COM
Administrative Contact:
Kaplan, Philip pk@pkinteractive.com
212-273-9623
and a very good copy of Microsoft's IE-integrated file manager
I've never used it so i really can't say. But I do know that the main dude for it worked at Apple for a while. so I imagine he wasn't really trying to copy Microsoft UI. He talks about how they carfuly chose when to borrow, and when to invent. hopefully he wasn't just blowing hot air.
A file manager is for managing files. A Web browser is for viewing files. To integrate the two is to create confusion
Not unless your a complete freakin newbie. I think most people understand then when you type in c:\temp\ (or/root/) you'll be be in local file mode and when you type www.slashdot.org you'll be at a website. As for this being "bloatwhere" it's all in the implementation. I'm sure your aware that explorer ISN'T IE, it's just a wrapper for IE, even IE is a wrapper for IWebbrowser. they are loaded at different times, it's not like they are both loaded in RAM when you load it.
It's good to see some really experianced UI developers doing something with Gnome. I really wonder if they will fix all the little things that don't work well in X, things like the wheel mouse, TAB stops, consistant hot heys, even window focus - much bigger issues too, like an consistant way to install programs. an easy way to configure all my hardware (which drivers for will always seem to be in beta). and most of all SPEED Gnome makes me think my computer is a year older then it is. hell i can't even play Quake III on it without crying.
I'm a little out of the scene, are these already working well? Last time i used X I was an enlightenment or blackbox junky. I always found KDE and Gnome to be cheap 1.0 like rip offs of Windows, the really big important things worked. but all the little details we're missing.
Truth be told, I'm not going to use and *nix for a desktop until i get a decent browser. Mozzila seems to be coming around nicely. maybe in a year of so. So for now i'm sticking to Win2k.
I'm going to dump all my karma in the can for this.
But the general responses to this artical are of the nature that "CNet is stupid" (even though it's not for geeks) and "It's a problem, and we should try to fix it". If you simply change the headline to.. "Windows Open To Format String Attacks". I imagine the response would be a slew of crude comments, and downright flames about microsoft incompitance.
The interesting thing is that this "flavor" of expliot has a lot of things in common with the outlook attack of a few moons ago..
Both are more or less a problem hard to fix because it is based of a powerfull feature. The fact that Outlook can execute script within the e-mail is really pretty darn cool. The fact that developers can make applications more maintainable and portable with functions like vsprintf() is a good feature.
Closed source OS's are much less vunurable simply because you don't know where those vsprinfs() are, makeing is darn near impossible to expliot. *nix wasn't vunurable to the Outlook expliot, well.. because it doesn't run Outlook.
Recently I've seen a much more rational look at the whole MS vs. *Nix thing. in a recent Win2k vs. Linux debate many people we're modded up exressing how they belived that Win2k is a fine OS that should get more respect that is has received. Hopefully the next time around people here can be a little less one sidded with these things.
I'm not expert on the matter, and could be very wronge. That being said, the basic concept is to overrun a buffer to get to the IP (instruction pointer). Once you have the this cursor of execution you can tell it to jump to some code you stuck in memory, via the overflow.
there is a MUCH better explaination (and tutorial on this) by mudge of l0pht.com. One niffty trick i remember from the tutorial was a program that skipped over a line of it's own code. the program had two printf()'s, one of them never got executed because the IP was captured and increamented, therefore skipping a line of execution.
One of the major problem with a buffer over flow attack is that it's very depenedant on the flavor of OS and application you are overflowing. even if you have an exploit for a buffer overflow in say wuftp, is won't work on anything but the exact build, and OS setup it was designed for. because the offset for the IP will be different.
The Win4Lin platform seems extremely stable - no crashes or freezes at all
is a quote from the marketing team over at trelos, i highly doubt that this is really that stable concedering that is appears
from this diagram that this app runs in linux kernal space. Not such a good idea, if your interested in stabilty.
I could be completly wronge here, but if it does indeed use MS code, and runs in kernel space, i can't imagine this setup being very stable.
Another point to make is that this is a comercial product. (way) not GPL.
Slashdot Mirror
This DVD better be a weekly subscription or i'm going to have a backup of ever out of date software.
Open Source moves faster then anything out there. Getting a copy of win98 might last you 4 years, a copy of Gnome is only good for about 4 weeks.
-Jon
I remember my father was very impressed with the orginal ALTAIR BASIC, mainly by the fact that it did run in 4K, and still leave (albiet) small amount of room for the program code
He spent some time looking at a disassemble of it and told me the garbarge collection on it was stupid, it was bassicly brute force or some such thing.
thanks all i know, I didn't get into the scene until C64 BASIC.
-Jon
One of the things that stood out when I took figure drawing class, was to try to make part of the image "wrong", do something that annoys the viewer. it will keep him or her glued to it, intrigued. Sense then, I've always had some admiration for works that explicitly try to annoy you in some way. usully it's more suttle. Annoy.com is REALLY annoying. it's blinks, it shouts furphanitys, and it's crawling on IIS 4 due to ./.
Would i say annoy.com is art? as much as it bothers me i have to say yes. it will be hard for me to forget that site, it HAS effected me somehow, i didn't like it, but it has changed me. i'm a different person for clicking on that link (ok maybe this is going to far).
i'll just say that the courts we're right.
-Jon
Despite this sentiment, however, OpenBSD seems to be doing quite well....
i I think OpenBSD doesn't cracked much because no-one actually runs it. it's "that really secure OS", but we need mainstream software to run on our OS, so we're going to use FreeBSD or Linux.
MacOS is also revered to be to secure the DOD, It's security through obscurity.
-Jon
Now Perens has ruled, or should one say opined, that Sun is perfectly within its legal rights - not that he particularly likes it. He cites exceptions in the GPL allowing for Sun's ported drivers "as long as the drivers are runtime loading and are not distributed with the kernel."
Becker argues the exceptions were intended for user-level programs, not drivers that send threads into the kernel.
"Yes, that is how it was intended, but that's not what it says," Perens replies. In other words, a hole in the license.
In e-mail exchanges with Becker (provided to us by the participants, not obtained surreptitiously), Perens added that "We both know that the GPL was not intended to allow this use. Unfortunately, the language of the GPL does allow it."
Neither Perens nor Becker has suggested how the GPL could, or should, be changed. But Becker knows one thing - he wants Sun to stop peddling the kit, which he says includes "explicit instructions on taking a copyrighted work and converting it to unlicensed use with the Solaris operating system."
It seems the two closest to the issue disagree with you. I don't really understand the whole thing myself. No offence, but I would take these two's word over yours.
-Jon
I'm aware of the differnce between the term CODEC (compression decompression) and file formats. I didn't think I seemed confused in the matter.
-Jon
btw: MP3 is MPEG 2 (or MPEG 2.5) audio layer III, not MPEG 1, i have no clue what audio compression MPEG 1 uses, i imagine it's just RLE PCM or something else as gay.
Microsoft did the world a grande disservice by deciding that no, threads of execution did not need to be firewalled off from each other so that stray pointers could not crash the entire system, let's run them all in the same memory space!
I really don't get this. Your talking about Win95 right? Linux can't hold a candle to NT's threading.. Anyway besides trashing Microsoft, I hope you relies the Microsoft's modal of software development is the more modular then any other company/group has ever created. Everything in windows is modular, I could re-write the spell checker for Word, or use Words spell checker from a webpage.
If someone *couldn't* understand your design you probably haven't designed to many programs. Anyone who's been around the ropes a few times knows to avoid overly complex designs, make components that have lose coupling and not to write threads that fuck up the OS. I used to work with this guy who was VERY bright, and a great coder. He was designing our new system. his initial idea's we're good, but he quickly fell into the trap over designing and completing the system. a few weeks later we got some more devs who after 2 weeks still couldn't understand the design.
About a month later the project got crapped. after our project leader quite, and the new manger (guess what) couldn't understand the design.
btw: this guy had never designed a program before.
-Jon
Don't you worry about getting in trouble with Andover/CmdTaco about ripping off thier content? -Jon
besides that id like to mention that people should be way more exsited about this. people don't seem to relize that in about 2 years the MPAA is going to totally freak out because napster-forvideo will have every freaking movie and video for download.
that and your 2.5ghz computer can record a whole movie to a tiny 700megs on your 2.5 terrabyte drive.
think about it!
-Jon
oh ya, Tom didn't mention that DiVX is the actually Microsoft MPEG v4, just cracked to remove the copyright stuff. how they got hold of it, i can't tell you. also Microsoft and Real seem to have slightly better codecs now, Microsoft Video V7 (why 7? ,marketing) and Real 8, both are REALLY freaking amazing. even better then standard MPEG4, which as someone pointed out is bassicly Quicktime, which uses the sorenson codec. Not that Quicktime isn't da shit, it is.
Right on man. I've noticed that too. people arn't blindly going a long with the anti-MS FUD. It's good to see, and better to read it put so well.
thanks,
-Jon
this is freakin stupid. Every company and there MOM has banner adds that do the same freakin thing! if you don't like microsoft getting a little ++ on there counter for when you go to CNN, just remove the freakin bookmark and put it in yourself. jezzus!
I HATE to remind you morons but Microsoft Is a COMPANY, company's exists to make MONEY. If MS can make a few extra million from this more power to them.
What about the banner add on top of slashdot?? you think it doesn't check a counter somewhere? for gods sake you people are being incredibly obtuse.
-Fuckin my' Karama (but this is worth it)
= When it's NOT a test, we'll fuck ya.
-Jon
-Jon
Ya, actually it will. Not in princable, but in pratice yes. There really isn't anything the courts police of FBI can do about it, people HAVE DeCSS, they have napster, Gnutella, and all the others. It doesn't matter what this or that judge say. it's not going to change anything, in pratice at least.
-Jon
But how well will it really work? Remember that bullshit a while back about the comapny that had the "porn detection" app, the one that looks at photos and can tell if it has a nipple in it? ya, like that worked.
Id like to see how well it works on, say..
No, fuck you man. I'm going to come over to your house and kill your dog, but first i'm going to rap your girlfriend and piss in your mouth! You cock sucking fag!"
no offence of course, i'm just trying to think of how it could know with out a doubt this is flame mail. I mean what if it said...
No (way), fuck you (that dude). I'm going to come over to your house (help) you (feed) your dog, but first i'm going to (help) you kill the borden your girlfriend (is giving you), and (clean) your (toilet)! You cock sucking fag!, (hehe)"
maybe that one is too easy. but anyway, i don't really trust a computer to understand the "meaning" of any of this, and i have doubt any system is going to figure it out.
-Jon
Foveon Inc., a closely held company in Santa Clara, Calif., plans to announce Monday that it has set a new image standard for sensors constructed using a production process known as CMOS, for complementary metal oxide semiconductor.
CMOS? isn't that TLA already in use?
computer memory operating system?? i forget...
-Jon
bullshit
+film costs +it costs me about 10 bucks to develop a roll of film @ riteaid
+you forgot that while scanning is good quality, YOU have to scan in all those images, crop the edges, remove artifacts, etc.. i don't know about you, at my hourly rate I would save money getting a digital camera after about one: buy film, get film developed, scan in 36 images session.
-Jon
It's going for what now????
.com, .net, and .org domains can now be registered
.COM, .NET, .ORG, .EDU domains and
oh, and here's the whois..
[root@bigfreak bounce]# whois fuckedcompany.com
Whois Server Version 1.3
Domain names in the
with many different competing registrars. Go to http://www.internic.net
for detailed information.
Domain Name: FUCKEDCOMPANY.COM
Registrar: TUCOWS.COM, INC.
Whois Server: whois.opensrs.net
Referral URL: www.opensrs.org
Name Server: DS1.VIRTUALSCAPE.COM
Name Server: DS2.VIRTUALSCAPE.COM
Updated Date: 26-jun-2000
>>> Last update of whois database: Mon, 11 Sep 2000 04:45:28 EDT
The Registry database contains ONLY
Registrars.
Registrant:
PK Interactive, Inc.
5 West 31st Street 7th Floor
New York, NY 10001
US
Domain Name: FUCKEDCOMPANY.COM
Administrative Contact:
Kaplan, Philip pk@pkinteractive.com
212-273-9623
Technical Contact:
Registration, Domain domreg@optisoft.com
816 455 7939
Billing Contact:
Kaplan, Philip pk@pkinteractive.com
212-273-9623
Record last updated on 11-Sep-2000.
Record expires on 27-May-2001.
Record Created on 27-May-2000.
Domain servers in listed order:
DS1.VIRTUALSCAPE.COM 209.213.96.2
DS2.VIRTUALSCAPE.COM 209.213.97.214
I've never used it so i really can't say. But I do know that the main dude for it worked at Apple for a while. so I imagine he wasn't really trying to copy Microsoft UI. He talks about how they carfuly chose when to borrow, and when to invent. hopefully he wasn't just blowing hot air.
A file manager is for managing files. A Web browser is for viewing files. To integrate the two is to create confusion
Not unless your a complete freakin newbie. I think most people understand then when you type in c:\temp\ (or /root/) you'll be be in local file mode and when you type www.slashdot.org you'll be at a website. As for this being "bloatwhere" it's all in the implementation. I'm sure your aware that explorer ISN'T IE, it's just a wrapper for IE, even IE is a wrapper for IWebbrowser. they are loaded at different times, it's not like they are both loaded in RAM when you load it.
-Jon
It's good to see some really experianced UI developers doing something with Gnome. I really wonder if they will fix all the little things that don't work well in X, things like the wheel mouse, TAB stops, consistant hot heys, even window focus - much bigger issues too, like an consistant way to install programs. an easy way to configure all my hardware (which drivers for will always seem to be in beta). and most of all SPEED Gnome makes me think my computer is a year older then it is. hell i can't even play Quake III on it without crying.
I'm a little out of the scene, are these already working well? Last time i used X I was an enlightenment or blackbox junky. I always found KDE and Gnome to be cheap 1.0 like rip offs of Windows, the really big important things worked. but all the little details we're missing.
Truth be told, I'm not going to use and *nix for a desktop until i get a decent browser. Mozzila seems to be coming around nicely. maybe in a year of so. So for now i'm sticking to Win2k.
-Jon
I'm going to dump all my karma in the can for this.
.. "Windows Open To Format String Attacks". I imagine the response would be a slew of crude comments, and downright flames about microsoft incompitance.
But the general responses to this artical are of the nature that "CNet is stupid" (even though it's not for geeks) and "It's a problem, and we should try to fix it". If you simply change the headline to
The interesting thing is that this "flavor" of expliot has a lot of things in common with the outlook attack of a few moons ago..
Both are more or less a problem hard to fix because it is based of a powerfull feature. The fact that Outlook can execute script within the e-mail is really pretty darn cool. The fact that developers can make applications more maintainable and portable with functions like vsprintf() is a good feature.
Closed source OS's are much less vunurable simply because you don't know where those vsprinfs() are, makeing is darn near impossible to expliot. *nix wasn't vunurable to the Outlook expliot, well.. because it doesn't run Outlook.
Recently I've seen a much more rational look at the whole MS vs. *Nix thing. in a recent Win2k vs. Linux debate many people we're modded up exressing how they belived that Win2k is a fine OS that should get more respect that is has received. Hopefully the next time around people here can be a little less one sidded with these things.
but i know that's not going to happen.
-Jon
there is a MUCH better explaination (and tutorial on this) by mudge of l0pht.com. One niffty trick i remember from the tutorial was a program that skipped over a line of it's own code. the program had two printf()'s, one of them never got executed because the IP was captured and increamented, therefore skipping a line of execution.
One of the major problem with a buffer over flow attack is that it's very depenedant on the flavor of OS and application you are overflowing. even if you have an exploit for a buffer overflow in say wuftp, is won't work on anything but the exact build, and OS setup it was designed for. because the offset for the IP will be different.
or something like that :)
-Jon
is a quote from the marketing team over at trelos, i highly doubt that this is really that stable concedering that is appears from this diagram that this app runs in linux kernal space. Not such a good idea, if your interested in stabilty.
I could be completly wronge here, but if it does indeed use MS code, and runs in kernel space, i can't imagine this setup being very stable.
Another point to make is that this is a comercial product. (way) not GPL.
-Jon
Gates: In a recent interview with Red Herring,
gamecub
psx2
Funny, no links to directx
-Jon
this site is fuckin k-rad, mod this puppy up! -Jon