Well, the effort of packaging a application (a) to different platforms and (b) to different distributions is quite a duplicate one, involving a lot of people (and time).
Isn't that was http://autopackage.org/ is trying to do to? I find it a benefit of Linux if there is only one instance of a XML library in my memory, though.
yeah, but you don't have a login shell with sudo -s, just a normal shell. man su:
-, -l, --login
Provide an environment similar to what the user would expect had the user
logged in directly. This effects env vars and landing in ~ instead of the wd.
That is only true when you use different users for using the computer (e.g. guest) and administrating the computer (e.g. myfirstname). Which you -- and any default install of Linux -- don't do. The point of sudo is that you can use the same user to launch root commands. The rest of your comment is just unrelated blah.
You, and the majority of Linux users are delusional. You think malware is only executables. A glitch in any software package -- e.g. Firefox or OpenOffice -- would be enough to add a bash script to.bashrc (or replace the file). This can download and start all the software it wants, unless you set the/home partition noexec. Another attack method would be to append a script to the GNOME startup applications.
Consider appending the following script to.bashrc (no one ever looks in there). Next time you go into your shell and do "sudo su - " or something similar, the script has root privileges (if you use sudo timeouts or no sudo password). #!/bin/bash
MAXAGE=100
while sleep 10; do
pgrep -f -U 0 -P $PPID,$$ && {
# echo parent has a root owned child process
id=$(pgrep -f -U 0 -P $PPID,$$ | head -n1)
# wait $id
age=$(($(date +%s) - $(stat/proc/$id/ -c '%Y')))
if [ "$age" -lt "$MAXAGE" ]; then
# echo the child is young
# evil code here
sudo touch/root/you_were_hacked
# sudo rm -rf/etc/
fi
} done &
With 10+ scripting languages on the average Linux install, the attacker has plenty of choices. Linux is only safer if you use a hardened kernel, SELinux, noexec partitions and read-only binary partitions. Crackers are already laughing about the upcoming, unworried lusers that think their OS is invulnerable.
Mark Bigham, a vice president of business development in Raytheon's Intelligence and Information Systems unit, says the company selected Android because its open-source nature made developing applications easy." (emphasis mine)
If that was the case, then Open Source systems would have more applications than closed source counterparts. But this is hardly the case.
They do. I'm sure you'll find a dozen office suites even if you are not counting forks.
In addition, I see far more substandard, half-baked software on "open" systems than closed ones. What's going on?
What is going on is that companies have a separate testing department (read: separate people) and software (such as litmus) to support the process. Open-Source projects partially don't have the man-months to fix all bugs. Sometimes they just stop developing after they solved their use case and disregard others (in the worst case this means the program is accessible for people who have coded in it).
An example: Open Source OO.o is still as buggy and a pain to use on its Open source native OS (read Linux), though it runs and feels better on closed source Windows. This is after a decade of development. Do not tell me OO.o does not have resources. I just do not understand this argument.
That has to do with the compiler. Windows generally runs faster than Linux because of better optimization. Linux subsystems are partially holding up by having a simple architecture and being written in C (daemons, GNOME,...), but this is not true for all packages (e.g. OOo).
Still, the man has a point: you simply can not do the things you can on Open OSes on closed OSes. For example, you always have the source as a last-resort documentation on how to use a API.
Maybe similar to this persona editor project. Libraries that are able to tap into proprietary websites (social networks, etc.) to escape from vendor lock-in would be great.
if they filter out tweets that don't have retweets, it might be not that bad. Twitter addresses another aspect of the internet: Viral marketing, and near-realtime content
Ooh look, I hacked together my custom Linux distribution. When I update it, it breaks. Linux obviously sucks!
No user ever should need to compile the kernel. And a software distributor can not foresee and supervise all subsystems, packages and use contexts, regardless of being Windows or Linux.
Radioactive decay particles:
- alpha (2 protons+2 neutrons),
- beta (electron or positron),
- gamma (photons) Cosmic radiation:
- photons (gamma)
- protons
- helium
- electrons in high-speed, high-energy;... not mentioning neutrinos, as they don't interact. These are two different tinfoil hats.
You can install it from your running Linux or something to a free partition if you don't want to burn a CD. It is a good finger exercise to do without a CD.
Not entirely related: These guys observed the evolution of long-living flies for 20 years (google talk). Although I do have some reservations about their ethics and patents.
Well, the effort of packaging a application (a) to different platforms and (b) to different distributions is quite a duplicate one, involving a lot of people (and time).
Isn't that was http://autopackage.org/ is trying to do to?
I find it a benefit of Linux if there is only one instance of a XML library in my memory, though.
yeah, but you don't have a login shell with sudo -s, just a normal shell.
man su:
-, -l, --login
Provide an environment similar to what the user would expect had the user
logged in directly.
This effects env vars and landing in ~ instead of the wd.
That is only true when you use different users for using the computer (e.g. guest) and administrating the computer (e.g. myfirstname). Which you -- and any default install of Linux -- don't do. The point of sudo is that you can use the same user to launch root commands. The rest of your comment is just unrelated blah.
The point was that any (faulty) program can rewrite your .bashrc and schedule a script for a future run. There is no way of you knowing immediately.
You, and the majority of Linux users are delusional. You think malware is only executables. A glitch in any software package -- e.g. Firefox or OpenOffice -- would be enough to add a bash script to .bashrc (or replace the file). This can download and start all the software it wants, unless you set the /home partition noexec.
Another attack method would be to append a script to the GNOME startup applications.
Consider appending the following script to .bashrc (no one ever looks in there). Next time you go into your shell and do "sudo su - " or something similar, the script has root privileges (if you use sudo timeouts or no sudo password).
#!/bin/bash
MAXAGE=100
while sleep 10; do
pgrep -f -U 0 -P $PPID,$$ && { /proc/$id/ -c '%Y'))) /root/you_were_hacked /etc/
# echo parent has a root owned child process
id=$(pgrep -f -U 0 -P $PPID,$$ | head -n1)
# wait $id
age=$(($(date +%s) - $(stat
if [ "$age" -lt "$MAXAGE" ]; then
# echo the child is young
# evil code here
sudo touch
# sudo rm -rf
fi
}
done &
With 10+ scripting languages on the average Linux install, the attacker has plenty of choices. Linux is only safer if you use a hardened kernel, SELinux, noexec partitions and read-only binary partitions. Crackers are already laughing about the upcoming, unworried lusers that think their OS is invulnerable.
Deleting everything in Z: (user home directory) would be bad enough in my books. Also, sockets are free to use, so it could infect other hosts.
Mark Bigham, a vice president of business development in Raytheon's Intelligence and Information Systems unit, says the company selected Android because its open-source nature made developing applications easy." (emphasis mine)
If that was the case, then Open Source systems would have more applications than closed source counterparts. But this is hardly the case.
They do. I'm sure you'll find a dozen office suites even if you are not counting forks.
In addition, I see far more substandard, half-baked software on "open" systems than closed ones. What's going on?
What is going on is that companies have a separate testing department (read: separate people) and software (such as litmus) to support the process. Open-Source projects partially don't have the man-months to fix all bugs. Sometimes they just stop developing after they solved their use case and disregard others (in the worst case this means the program is accessible for people who have coded in it).
An example: Open Source OO.o is still as buggy and a pain to use on its Open source native OS (read Linux), though it runs and feels better on closed source Windows. This is after a decade of development. Do not tell me OO.o does not have resources. I just do not understand this argument.
That has to do with the compiler. Windows generally runs faster than Linux because of better optimization. Linux subsystems are partially holding up by having a simple architecture and being written in C (daemons, GNOME, ...), but this is not true for all packages (e.g. OOo).
Still, the man has a point: you simply can not do the things you can on Open OSes on closed OSes. For example, you always have the source as a last-resort documentation on how to use a API.
https://bugzilla.mozilla.org/show_bug.cgi?id=267888
I guess patches are welcome...
No, the message is screw VNC and SMB. I want to use that userfriendly tool!
Step 1: Was the email sent via "Genuine Microsoft Outlook 2009"?
Step 2: If not, it's clearly a scam. You know how those "viral license" people are.
Fixed.
Being blue-eyed -- not being cautious towards scams -- has nothing to do with the technical details of malware.
Use KOrganizer (Kalendar+KMail). It's great.
More frontends (and editors) for remind would be nice too ...
Maybe similar to this persona editor project. Libraries that are able to tap into proprietary websites (social networks, etc.) to escape from vendor lock-in would be great.
if they filter out tweets that don't have retweets, it might be not that bad. Twitter addresses another aspect of the internet: Viral marketing, and near-realtime content
Ooh look, I hacked together my custom Linux distribution. When I update it, it breaks. Linux obviously sucks!
No user ever should need to compile the kernel. And a software distributor can not foresee and supervise all subsystems, packages and use contexts, regardless of being Windows or Linux.
They all have a lowercase i in them.
The Linux Kernel has 3 schedulers in the mainline:
- Anticipatory http://www.kernel.org/doc/Documentation/block/as-iosched.txt
- Deadline http://www.kernel.org/doc/Documentation/block/deadline-iosched.txt
- CFQ http://kerneltrap.org/node/8082
With 50+ they almost reached the number of Mac users :-P
No, Einstein.
Radioactive decay particles: ... not mentioning neutrinos, as they don't interact.
- alpha (2 protons+2 neutrons),
- beta (electron or positron),
- gamma (photons)
Cosmic radiation:
- photons (gamma)
- protons
- helium
- electrons
in high-speed, high-energy;
These are two different tinfoil hats.
One day winter, one day spring, one day summer, ooh no time for autumn
These are not the addons you're looking for
You can install it from your running Linux or something to a free partition if you don't want to burn a CD.
It is a good finger exercise to do without a CD.
Not entirely related: These guys observed the evolution of long-living flies for 20 years (google talk). Although I do have some reservations about their ethics and patents.
I heard the battery doesn't last more than a day?
I prefer my phone dumb. And I prefer it to last at least a week.