The malware is installed from a compromised system after cracking a SSH server's root password, in the path/etc/.xsyslog
If somebody cracks into a ssh root shell, this trojan is the least of your concerns. Anyway, I believe nobody is letting ssh root logins nowadays. Also, what does this have to do with TFA?
The new method, called electron ptychography, dispenses with the lens and instead forms the image by reconstructing the scattered electron-waves after they have passed through the sample using computers.
Professor Rodenburg added: "We measure diffraction patterns rather than images. What we record is equivalent to the strength of the electron, X-ray or light waves which have been scattered by the object – this is called their intensity. However, to make an image, we need to know when the peaks and troughs of the waves arrive at the detector – this is called their phase.
"The key breakthrough has been to develop a way to calculate the phase of the waves from their intensity alone. Once we have this, we can work out backwards what the waves were scattered from: that is, we can form an aberration-free image of the object, which is much better than can be achieved with a normal lens.
I call it BS, there is no other way to measure phase than by interference. It seems they just reinvented holography indeed!
"Over the weekend, developer Egor Homakov exploited a gaping vulnerability in GitHub that allowed him (or anyone else with basic hacker know-how) to gain administrator access to projects such as Ruby on Rails, Linux, and millions of others.
Linux??? Can we mod summary as troll? Linux has its origin repository in kernel.org and is distributed over cloned repositories all over the world including my laptop. One can't simply inject a commit into one of those repositories (such as github) and expect it to automatically propagate into kernel.org.
Furthermore, even if you manage to inject a commit into some random project at Github, high are the chances that it would be detected by another developer. Who commits to a repository without reading the commit history? Now, this Rails vulnerability is rather serious and deserves attention but this article is just plain FUD against github. Congratulations!
I didn't know about the Black Tuesday, thanks for the tip. Still, I have limited time to spend gaming so I would rather spend that time playing than to deal with updates or trying to get those games working on Linux. Hence my post about liking the idea of having a dedicated device with Steam which you just power on and play, no maintenance required : )
As someone who never bought any dedicated gaming device (in exception to a GameBoy long long time ago), I would look forward to this if Steam provide their own dedicated operating system for the SteamBox. I'm a day-to-day GNU/Linux user which dual-boots into Windows 7 for gaming. One of the things I hate is having to care about antivirus and windows updates when *I just want to game*. Having Windows rebooting my computer automatically for a update when I'm in the middle of Portal is really annoying. I love Steam though, I like their game offers and associated publishers, I think its a great idea which simplifies the whole process of buying and installing a game and would certainly love to see that in a dedicated device.
I found Gentoo instructive for similar reasons. Painful, but instructive.
After going through the Gentoo installation handbook one should acquire some basic knowledge about the inner workings of a Linux based system. Not just how to use a Linux system but also how to assemble and manage one.
Anyway I fail to see how that link is even relevant here.
It is in the context of parent's Joke.
Tech companies have a lot of failures. Looking at everything as a conspiracy is a sign of being biased.
Conspiracy? It is just a pretty good sum of past Microsoft's anti-competitive behavior. How is this a conspiracy? Is the (still running) fine imposed on Microsoft by the European Commission also a conspiracy?
Apple had it's own Copland which promised a lot and turned out to be vaporware.
And I believe it! Now is this motive to mod you down straight away and accusing you of following a particular agenda? Because that's exactly what was done to me.
I first saw the link for this article here at slashdot. I also saw it being reposted a couple of times since then and being modded informative or insightful. Personally, I don't see what changed since then so I thought in reposting the link. Futhermore and despite your biasing, information is still information even if you don't agree with it.
How do dolphins and octopuses rank? I tried a search w.r.t. octopuses but didn't find anything (and wikipedia has nothing about it).
Octopuses are the smartest invertebrates on Earth. I do sparrow fishing as hobby and they don't stop amazing me, from their ability to deploy decoy legs able to walk alone, annoying ink jets and their fantastic camouflage they are pretty good stealing items too! They should join thepiratebay! (it's a joke, I know the difference between stealing and copying)
Maybe Qt/Gnome/etc developers might consider an optional preload daemon for their libraries?
That is already being done. XFCE4 at least has the following options in Settings -> "Session and Startup" in Advanced tab: [ ] Launch GNOME services at startup. [ ] Launch KDE services at startup.
The problem is, once you start to use programs that require other frameworks (GTK and such), initial load times are much worse; and with Windows, the situation is even worse.
People have to agree with that no matter what. If an application executable is linked to a dynamic library that is not yet mapped into memory, the OS then first needs to map it. This can take time if the library depends on other libraries which are not mapped yet (often the case of GUI frameworks). In the case of GNU/Linux, most of GUI applications are linked to either libQt* or libgtk. If you (the reader) are running Gnome and you execute a application linked with KDE, you will certainly notice that it takes longer to execute. Nonetheless, the opensource nature of the GNU/Linux ecosystem makes it easy (and a standard practice) to reuse code and for that reason QT and GTK are linked with a common base of shared libraries like libX11, libz and libpng, which is a good thing. It was long the time I last programmed in Windows so correct me if I'm wrong but I don't think that the situation is worse in Windows because it also provides a base of system libraries where most of proprietary applications are linked against (DirectSound, GDI32, etc..) . Now, *it could* be worse in the case of proprietary (non-Microsoft) applications because they tend to depend on shared libraries which are also built by the same vendor to reuse some code between their multiple products or just to abstract the underlying "low level" API. Obviously those libraries are not reused by other vendors.
Now back to topic. When I fire up an application, I expect it to load instantaneously. If it does not, then I look at the laptop's HDD LED light to check for HDD activity (the HDD is always the bottleneck here). I don't need a splash screen because I know (through the blinking HDD LED) that the application is running and I wait for it. However this is my case, which is an exception because I know about OSes and Computers. Most (regular) users run the application and if they don't see any feedback in the screen, they run it again and again until it works; completely ignoring subtle feedback tips from the mouse icon or even the laptop LED indicators. In those cases, I strongly believe a splashscreen is obligatory.
The origins of the site now known as Slashdot date back to July 1997 when Rob "CmdrTaco" Malda started a personal website called Chips & Dips, which featured a single "rant" each day about something that interested him – typically something to do with Linux or open-source software. (...) On June 29, 1999, the site was sold to Linux megasite Andover.net for $1.5 million in cash and $7 million in Andover stock at the IPO price. Part of the deal was contingent upon the continued employment of Rob Malda and Jeff Bates and on "the achievement of certain milestones". With the acquisition of Slashdot, Andover.net could now advertise itself as "the leading Linux/Open Source destination on the Internet".[4][5] Andover.net eventually merged with VA Linux on February 3, 2000,[6] which changed its name to SourceForge, Inc. on May 24, 2007, and became Geeknet, Inc. on November 4, 2009.[7]
Emphasis mine. If people really want to know more about windows, there is MSDN and other million dedicated websites already. So yeah, blame on wanting old slashdot back.
Compare this to Right-Click -> Mount. Which is also available on some distros of Linux depending on DE and such.
No, two lines of fucking arcane bullshit isn't ease of use. It's nerdy crap.
It is not arcane or nerdy crap, it serves the purpose. Suppose you need to mount a iso file in a remote computer, which solution do you think its better? 1) Use VNC (or X11 over SSH) to display your (Gnome/KDE/...) desktop and use the file browser to browse into the file and then right click it->mount? 2) ssh into the remote host, type su, type "cd/path/to/file/dir; mkdir -p/mnt/iso; mount -o loop file.iso/mnt/iso" ? now good luck using solution 1 in a public place with low bandwidth...
The conclusion you should draw from here is that GUI is not better than CLI, and vice-versa. Both have their use cases and if you want to be proficient you should use BOTH.
Yeah, I have this hard lockup (on a G86) that always happen when I suspend (s2ram) the laptop and it is connected to one screen other than the laptop internal. I've been willing to report this for quite some time now, but you know how it is, it is easier to avoid the problem than to fix it:P
Why is it so wrong to use the proprietary drivers?
I'm going to give you an example. My parents computer which is actually a laptop with a GeForce FX Go 5300 has GNU/Linux on it. The last official driver from nvidia supporting that card is nvidia-drivers-96.xx. Then if you read https://wiki.archlinux.org/index.php/NVIDIA:
Note: Currently nvidia-173xx, nvidia-96xx and nvidia-71xx drivers do not support Xorg release 1.11, and therefore are not available in the Official Repositories. You can use the open source drivers (nouveau or nv) instead.
I belive the drivers still worked under Xorg 1.10 under a compatibility layer. But my point is, if the vendor decides to stop supporting your hardware, you are left in cold waters if there isn't any opensource driver..
Another example is the XRandR case. Nvidia bundles the nvidia-settings application which works fine if you use it. However if you want to use the KDE or gnome or whatever other software to change the screen resolution and multiple-screens, then you will notice how bad they work BECAUSE nvidia fails to properly implement the XRandR specification (instead they make some kind of wrapper to their own twinview). With nouveau, XRandR works beautifully. Because nvidia also emulates Xinerama, sometimes window managers fail to properly detect your multi-screen setup geometry and you will get strange window management results. This happened to me and that's why I perfectly happy with nouveau. Of course I still hit bugs when playing opengl games and sometimes the GPU even hardlocks but I honestly prefer having those localized bugs than the general inconsistencies I described above.
BTW: cudos to everyone involved in nouveau. OpenCL support is indeed a very good thing:)
I wonder if you could make a firefox plugin that encrypts all posts to facebook, also detects other peoples encrypted posts and if you have their pub key decrypts them to view
Slashdot Mirror
Nice scare attempt but from your own link:
The malware is installed from a compromised system after cracking a SSH server's root password, in the path /etc/.xsyslog
If somebody cracks into a ssh root shell, this trojan is the least of your concerns. Anyway, I believe nobody is letting ssh root logins nowadays. Also, what does this have to do with TFA?
Count me in for four at least for my own house
Same here, I've been waiting for some kind of incentive to buy one to my parents - this might be it.
from TFA:
The new method, called electron ptychography, dispenses with the lens and instead forms the image by reconstructing the scattered electron-waves after they have passed through the sample using computers.
Professor Rodenburg added: "We measure diffraction patterns rather than images. What we record is equivalent to the strength of the electron, X-ray or light waves which have been scattered by the object – this is called their intensity. However, to make an image, we need to know when the peaks and troughs of the waves arrive at the detector – this is called their phase.
"The key breakthrough has been to develop a way to calculate the phase of the waves from their intensity alone. Once we have this, we can work out backwards what the waves were scattered from: that is, we can form an aberration-free image of the object, which is much better than can be achieved with a normal lens.
I call it BS, there is no other way to measure phase than by interference. It seems they just reinvented holography indeed!
didn't read TFA but did they just reinvent holography? http://en.wikipedia.org/wiki/Holography
That pretty much summarizes it :P quite funny also, thank you!
"Over the weekend, developer Egor Homakov exploited a gaping vulnerability in GitHub that allowed him (or anyone else with basic hacker know-how) to gain administrator access to projects such as Ruby on Rails, Linux, and millions of others.
Linux??? Can we mod summary as troll? Linux has its origin repository in kernel.org and is distributed over cloned repositories all over the world including my laptop. One can't simply inject a commit into one of those repositories (such as github) and expect it to automatically propagate into kernel.org.
Furthermore, even if you manage to inject a commit into some random project at Github, high are the chances that it would be detected by another developer. Who commits to a repository without reading the commit history?
Now, this Rails vulnerability is rather serious and deserves attention but this article is just plain FUD against github. Congratulations!
I didn't know about the Black Tuesday, thanks for the tip. Still, I have limited time to spend gaming so I would rather spend that time playing than to deal with updates or trying to get those games working on Linux. Hence my post about liking the idea of having a dedicated device with Steam which you just power on and play, no maintenance required : )
As someone who never bought any dedicated gaming device (in exception to a GameBoy long long time ago), I would look forward to this if Steam provide their own dedicated operating system for the SteamBox. I'm a day-to-day GNU/Linux user which dual-boots into Windows 7 for gaming. One of the things I hate is having to care about antivirus and windows updates when *I just want to game*. Having Windows rebooting my computer automatically for a update when I'm in the middle of Portal is really annoying. I love Steam though, I like their game offers and associated publishers, I think its a great idea which simplifies the whole process of buying and installing a game and would certainly love to see that in a dedicated device.
I found Gentoo instructive for similar reasons. Painful, but instructive.
After going through the Gentoo installation handbook one should acquire some basic knowledge about the inner workings of a Linux based system. Not just how to use a Linux system but also how to assemble and manage one.
Not possible, the erection the OP gets is not their own, but belongs to someone else doing 'penetration testing'.
LOL, that makes perfect sense with today's slashdot quote:
http://i41.tinypic.com/2mmkp1.jpg
Okay, that's pretty cheesy. But I'll admit it did make me giggle.
When I giggle I also get an erection. But that's probably irrelevant information.
Do you also giggle when you get an erection? That can be dangerous, you can die of exploding penis due to infinite recursion.
Who called me?
Anyway I fail to see how that link is even relevant here.
It is in the context of parent's Joke.
Tech companies have a lot of failures. Looking at everything as a conspiracy is a sign of being biased.
Conspiracy? It is just a pretty good sum of past Microsoft's anti-competitive behavior. How is this a conspiracy? Is the (still running) fine imposed on Microsoft by the European Commission also a conspiracy?
Apple had it's own Copland which promised a lot and turned out to be vaporware.
And I believe it! Now is this motive to mod you down straight away and accusing you of following a particular agenda? Because that's exactly what was done to me.
I first saw the link for this article here at slashdot. I also saw it being reposted a couple of times since then and being modded informative or insightful. Personally, I don't see what changed since then so I thought in reposting the link. Futhermore and despite your biasing, information is still information even if you don't agree with it.
Obligatory
http://www.roughlydrafted.com/RD/Q4.06/4E2A8848-5738-45B1-A659-AD7473899D7D.html
How do dolphins and octopuses rank? I tried a search w.r.t. octopuses but didn't find anything (and wikipedia has nothing about it).
Octopuses are the smartest invertebrates on Earth. I do sparrow fishing as hobby and they don't stop amazing me, from their ability to deploy decoy legs able to walk alone, annoying ink jets and their fantastic camouflage they are pretty good stealing items too! They should join thepiratebay!
(it's a joke, I know the difference between stealing and copying)
Maybe Qt/Gnome/etc developers might consider an optional preload daemon for their libraries?
That is already being done. XFCE4 at least has the following options in Settings -> "Session and Startup" in Advanced tab:
[ ] Launch GNOME services at startup.
[ ] Launch KDE services at startup.
The problem is, once you start to use programs that require other frameworks (GTK and such), initial load times are much worse; and with Windows, the situation is even worse.
People have to agree with that no matter what. If an application executable is linked to a dynamic library that is not yet mapped into memory, the OS then first needs to map it. This can take time if the library depends on other libraries which are not mapped yet (often the case of GUI frameworks). In the case of GNU/Linux, most of GUI applications are linked to either libQt* or libgtk. If you (the reader) are running Gnome and you execute a application linked with KDE, you will certainly notice that it takes longer to execute. Nonetheless, the opensource nature of the GNU/Linux ecosystem makes it easy (and a standard practice) to reuse code and for that reason QT and GTK are linked with a common base of shared libraries like libX11, libz and libpng, which is a good thing.
It was long the time I last programmed in Windows so correct me if I'm wrong but I don't think that the situation is worse in Windows because it also provides a base of system libraries where most of proprietary applications are linked against (DirectSound, GDI32, etc..) . Now, *it could* be worse in the case of proprietary (non-Microsoft) applications because they tend to depend on shared libraries which are also built by the same vendor to reuse some code between their multiple products or just to abstract the underlying "low level" API. Obviously those libraries are not reused by other vendors.
Now back to topic. When I fire up an application, I expect it to load instantaneously. If it does not, then I look at the laptop's HDD LED light to check for HDD activity (the HDD is always the bottleneck here). I don't need a splash screen because I know (through the blinking HDD LED) that the application is running and I wait for it. However this is my case, which is an exception because I know about OSes and Computers. Most (regular) users run the application and if they don't see any feedback in the screen, they run it again and again until it works; completely ignoring subtle feedback tips from the mouse icon or even the laptop LED indicators. In those cases, I strongly believe a splashscreen is obligatory.
Not only that but also plays videos contained inside compressed archives... I heard it is useful for p0rn!
From wikipedia:
The origins of the site now known as Slashdot date back to July 1997 when Rob "CmdrTaco" Malda started a personal website called Chips & Dips, which featured a single "rant" each day about something that interested him – typically something to do with Linux or open-source software.
(...)
On June 29, 1999, the site was sold to Linux megasite Andover.net for $1.5 million in cash and $7 million in Andover stock at the IPO price. Part of the deal was contingent upon the continued employment of Rob Malda and Jeff Bates and on "the achievement of certain milestones". With the acquisition of Slashdot, Andover.net could now advertise itself as "the leading Linux/Open Source destination on the Internet".[4][5] Andover.net eventually merged with VA Linux on February 3, 2000,[6] which changed its name to SourceForge, Inc. on May 24, 2007, and became Geeknet, Inc. on November 4, 2009.[7]
Emphasis mine.
If people really want to know more about windows, there is MSDN and other million dedicated websites already. So yeah, blame on wanting old slashdot back.
What is this now? MSDN blogs? Seriously, gimme old slashdot back please!
Compare this to Right-Click -> Mount. Which is also available on some distros of Linux depending on DE and such.
No, two lines of fucking arcane bullshit isn't ease of use. It's nerdy crap.
It is not arcane or nerdy crap, it serves the purpose. Suppose you need to mount a iso file in a remote computer, which solution do you think its better? /path/to/file/dir; mkdir -p /mnt/iso; mount -o loop file.iso /mnt/iso" ?
1) Use VNC (or X11 over SSH) to display your (Gnome/KDE/...) desktop and use the file browser to browse into the file and then right click it->mount?
2) ssh into the remote host, type su, type "cd
now good luck using solution 1 in a public place with low bandwidth...
The conclusion you should draw from here is that GUI is not better than CLI, and vice-versa. Both have their use cases and if you want to be proficient you should use BOTH.
Yeah, I have this hard lockup (on a G86) that always happen when I suspend (s2ram) the laptop and it is connected to one screen other than the laptop internal. I've been willing to report this for quite some time now, but you know how it is, it is easier to avoid the problem than to fix it :P
Why is it so wrong to use the proprietary drivers?
I'm going to give you an example. My parents computer which is actually a laptop with a GeForce FX Go 5300 has GNU/Linux on it. The last official driver from nvidia supporting that card is nvidia-drivers-96.xx. Then if you read https://wiki.archlinux.org/index.php/NVIDIA :
Note: Currently nvidia-173xx, nvidia-96xx and nvidia-71xx drivers do not support Xorg release 1.11, and therefore are not available in the Official Repositories. You can use the open source drivers (nouveau or nv) instead.
I belive the drivers still worked under Xorg 1.10 under a compatibility layer. But my point is, if the vendor decides to stop supporting your hardware, you are left in cold waters if there isn't any opensource driver..
Another example is the XRandR case. Nvidia bundles the nvidia-settings application which works fine if you use it. However if you want to use the KDE or gnome or whatever other software to change the screen resolution and multiple-screens, then you will notice how bad they work BECAUSE nvidia fails to properly implement the XRandR specification (instead they make some kind of wrapper to their own twinview). With nouveau, XRandR works beautifully.
Because nvidia also emulates Xinerama, sometimes window managers fail to properly detect your multi-screen setup geometry and you will get strange window management results. This happened to me and that's why I perfectly happy with nouveau. Of course I still hit bugs when playing opengl games and sometimes the GPU even hardlocks but I honestly prefer having those localized bugs than the general inconsistencies I described above.
BTW: cudos to everyone involved in nouveau. OpenCL support is indeed a very good thing :)
I wonder if you could make a firefox plugin that encrypts all posts to facebook, also detects other peoples encrypted posts and if you have their pub key decrypts them to view
Like this http://en.wikipedia.org/wiki/Off-the-Record_Messaging ?