Slashdot Mirror


User: Tony+Hoyle

Tony+Hoyle's activity in the archive.

Stories
0
Comments
5,728
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 5,728

  1. Re:How do I get infected? on Linux Kernel 2.6 Local Root Exploit · · Score: 1

    Well, until someone exploits the weak permissions on your webserver to execute a binary, get root, and pwn your system completely.

    Local root exploits are serious if you run any kind of server - and lots of home users run things like apache these days.

  2. Re:Whatever... on Linux Kernel 2.6 Local Root Exploit · · Score: 4, Insightful

    I get the impression the 'custom kernel' brigade have never worked on a corporate environment.

    Out there in the real world you use RHEL because it has paid support. You then use hardware certified by Redhat and use their packages (btw. RHEL doesn't appear to be vulnerable - you get an mmap failure trying to run the exploit).

    If your oracle server goes titsup and oracle refuse to support you because although you're running on the supported RHEL your cowboy IT guy recompiled the kernel and broke it.. that costs money (potentially millions if the downtime is extended). And time. And stress. And the IT guy's job, and his job reference, and, we would hope, his career.

  3. Re:This workaround works on Linux Kernel 2.6 Local Root Exploit · · Score: 1

    Preliminary builds are up I see:

    http://134.2.34.20/blank/debian/linux-2.6/

    However it looks like a single users' server so don't slashdot him (or at least do it gently :p).

  4. Re:noexec on Linux Kernel 2.6 Local Root Exploit · · Score: 1

    noexec can't be trusted. Before it was fixed it was enough to do:

    $ /lib/ld-linux.so.2 ./vmsplice_bug

    I know of a couple of other ways.. convoluted but they exist.

  5. Re:Misleading on Linux Kernel 2.6 Local Root Exploit · · Score: 4, Insightful

    PHBs aren't stupid (err.. did I just write that??). They understand that crap happens. They're not on your back because it happened, they want to know what you're going to *do* about it.

    So the right answer is not 'It's not really a problem, honest!' The right answer is 'Yes, I fixed the problem on all our servers first thing this morning, with no downtime.'

  6. Re:Beauty of OSS on Linux Kernel 2.6 Local Root Exploit · · Score: 1

    Shit no amd64 support...

  7. Re:This workaround works on Linux Kernel 2.6 Local Root Exploit · · Score: 2, Informative

    The parent bug for this is http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=464945

    This also has a patch to the debian kernel tree to fix it: http://bugs.debian.org/cgi-bin/bugreport.cgi?msg=54;filename=patch;att=1;bug=464945

    Hopefully will hit the apt mirrors shortly, as I don't fancy trying to get my head around make-kpkg (which never worked for me) at 10pm on a Sunday.

  8. Re:I am so depressed ... on Linux Kernel 2.6 Local Root Exploit · · Score: 1

    Second verson doesn't even compile for me: /tmp/cctpc16q.s: Assembler messages: /tmp/cctpc16q.s:118: Error: Incorrect register `%rax' used with `l' suffix

    First one even works within a xen virtual machine, which I would have thought it couldn't do because of the hypervisor.

    Doesn't seem to work on my virtual machine in the US - 'function not implemented' error. So that's safe.

    Now I've got to work out how to patch all my flippin' machines on a sunday night... sigh...

  9. Re:Legality? on Amazon Erases Orders To Cover Up Pricing Mistake · · Score: 1

    Not much point in spouting off at a till operator.. they have their procedures and rarely if ever know about consumer law.

    Each time that's happened to me I've done the 'it says it's priced at xxx on the shelf', they've checked the shelf, and given me the lower price.

    Bait and switch pricing happens all the time though.. ever been past a mobile phone shop? Some of the stuff they put on their store fronts is just plain lies, by comparison to what you'll really pay.

  10. Re:Death Star on Name the New Gamma-Ray Space Telescope · · Score: 1

    That would only work if we let it be widely known we'd strapped a shark to it as well.

  11. Re:The end of America on Has Ron Paul Quit? · · Score: 2, Insightful

    It might sound harsh but going down might just be what America needs right now. Then come out of it wiser and perhaps a little stronger.

  12. Re:Big deal on Has Ron Paul Quit? · · Score: 1

    What he has proved is that fanboyism works, to an extent.

    Steve Jobs for president in 4 years!

  13. Re:So look at it, take it apart, spend a few minut on Yet Another Perpetual Motion Device · · Score: 1

    Around the time of stephensons rocket it was commonly believed you would die if you went that fast, but not I believe by scientists, but by the general public.

    It's an interesting footnote to history, commonly mentioned in history programmes, but not in itself interesting.

    As for the speed of sound.. try http://www.daviddarling.info/encyclopedia/S/sound_barrier.html

  14. Re:This just in... on Hostile ta Vista, Baby · · Score: 1

    The point is that Facebook broke IPv6, and Vista didn't fix their problem. Other than that I sopped reading it since it just seemed like another mindlessly anti-Vista rant. The easiest way to get frontpaged, or karma, is to play to the Slashdot group mind, and thats what the author shamelessly did.

    Facebook allegedly 'broke' ipv6 (not verifiable - it has no AAAA record any more). OSX kept working. Linux kept working. ipv6 enabled XP kept working (I know, I use all 3 on and off to access facebook regularly).

    Vista failed.

    Vista didn't need to 'fix' anything. It needed to work, like every other OS. It didn't.

  15. Re:yeah, but then they'll get blamed... on Hostile ta Vista, Baby · · Score: 1

    You *have* to fall back. Frequently it's the client that doesn't have a valid ipv6 address. ISPs that issues ipv6 addresses are as rare as hen's teeth, so 90% of the time whatever address the client has, it doesn't go anywhere.

  16. Re:This just in... on Hostile ta Vista, Baby · · Score: 1

    Facebook works fine with ipv6 enabled on OSX, XP, Linux...

    Also, Facebook doesn't even *have* an AAAA record, so if it isn't working with Vista it's all pointing to an MS issue.

  17. Re:I don't understand... on The Future of XML · · Score: 1

    I was looking at a document management system the other week. Checkout a single document..? 4 A4 pages of XML.

    It started endless DAV requests apparently wanting the same information in a slightly different format each time.
    Then there was the deltaV checkout and about a half a page of xml just to describe exactly what it wanted.
    Then it went into a proprietary protocol, and spend 2/3rds of a page spooling xml with mostly empty tags to the server.

    And that was to get *one* document.

    Well over 90% of that was markup, not useful data. XML was the *wrong* thing to use for this, but it was used anyway.

  18. Re:So... on PC World Tests Final Version of Vista SP1 · · Score: 0, Flamebait

    Interesting the also claim to have sped up SMB file copies... given that they topped out at about 5kb/sec on a gigabit LAN on the original SP1 prerelease I should hope so!

  19. Re:Let me fix that for you on Muslim Groups Attempt to Censor Wikipedia · · Score: 1

    I could by the same argument post that Americans have invaded countries, killed people, even nuked countries, have twice voted in a genocidal maniac for a leader.. whose *own religious leaders* have called for the death of heads of state.

    But I won't, because that would be flamebait.

  20. Re:Good luck on Muslim Groups Attempt to Censor Wikipedia · · Score: 1

    to defy Islam is to defy the state

    Note whereas christianity often sought to influence the state (largely through conversion), to muslim Islam encompases the state - a fully mulsim country has the Quran built into its foundation.

    I can't see a future with that changing, because it would be a fundamental change to the entire religion.

    So the future if islam isn't going to follow the same track as christianity - it may settle down, but it will be their own, unique solution.

  21. Re:Good luck on Muslim Groups Attempt to Censor Wikipedia · · Score: 1

    But Puritans don't have sex!

    If only that were true, there wouldn't be a nation of 300 million of them annoying everyone.

    Now if we can just get them to really not have sex... the future looks a whole lot brighter!!

  22. Re:Good luck on Muslim Groups Attempt to Censor Wikipedia · · Score: 1

    There was no change.

    There's a small group of muslims who go around blowing things (and themselves) up. 99% of them are just people getting on with their lives.

    There's also a small group of christians who do the same (and more who would, if they thought it would help the cause eg. the godhatesfags.com crowd). 99% of them are also getting on with their lives.

    In fact it's been my experience that christians and muslims tend to get on better with each other than with agnostic/atheist groups because they're both mothesitic religions with a similar base.

    The difference is one of perception, and reporting (which is both caused by and reinforces the perception). A christian blowing up an abortion centre for example is likely to be reported as 'pro-lifer' blowing up an abortion centre, not christian. A muslim blowing up a building would merely be reported as a muslim... and in these small ways we form opinions that all muslims are the same.

  23. Re:Good luck on Muslim Groups Attempt to Censor Wikipedia · · Score: 1

    It's more of a generic term these days - US christianity is puritan at its root, and tends to be quite strict (against drinking, against sexual imagery, etc.). It's viciously exlusivist, and exclusivism when taken to its extremes leads to a lack of value of human life (the crusades are an example of this view - since the unsaved are just firewood anyway, torturing them is only adding a couple of years pain to an eternity of it.. so it's no so bad.. and if they repent it's a couple of years pain vs. an eternity of happiness, so it's worth the tradeoff).

    British christianity has celtic roots, which is much more liberal (in the dictionary sense, not the US political sense) - originally it was even quite pluralistic.. you'll often find celtic crosses mixed in with other religious imagery. What has developed in the UK is very different.. churches in pubs (a lot of catholic churches are built next to them), no issues with swearing, no sexual hangups (general disapproval of porn and teenage pregnancies, but they're more social mores than rules).

    Europe, being predominantly catholic, is somewhere in the middle... although I've not seen enough european churches to make much of a judgement about them.

    Then there's the hybrids - the US churches that came over to the UK. They have a US puritan outlook, and are largely populated by UK liberals. They're an enigma - they'll preach stuff they got from the US (young earth creationism, etc.) then half the congregation will meet in the pub afterwards and thrash out a compromise position.

    Yes, there are the nutters, but they're generally laughed at (or more frequently politely ignored) by even the evangelicals.

    An example of the difference I can think of is the Rapture Index (google it). For years I thought that was a spoof site.. in fact I remember having a good laugh about it with a few 'fundamentalists' I hung around with and we all agreed it was a great parody.

    Then I saw a TV programme where a US pastor insisted it was serious. My jaw hit the floor...

  24. Re:Good luck on Muslim Groups Attempt to Censor Wikipedia · · Score: 1

    We sent all our Puritans to the colonies to leave us in peace.

    Unfortunately they went and founded a bleedin' nation and keep coming back and telling us what to do!!

  25. Re:Good luck on Muslim Groups Attempt to Censor Wikipedia · · Score: 2, Interesting

    But, in Europe, try to suggest that 6 mil jews were killed in the holocaust and you'll be in a sticky situation.

    What's wrong with saying that? (speaking as a european). AFAIK that's the official historical position.

    Some have questioned the 6 million number (seems an awful lot given the timescales involved) but not that the holocaust exists.. indeed the act of denying it happened is likely to get you in a lot of bother (not with the law.. you've got a legal right to free speech under the human rights act... but everyone else is also free to disagree, loudly).