because if you'd actually learned anything in the same 20 years that I've been working in IT it is that there is no "magic platform" that's invulnerable to sloppy coding be it windows, linux, AIX, plan9, OpenBSD or whatever.
Go read Security Focus and count the number of "Design Errors"
Here's one from today's front page:
Linux Kernel Privileged Process Hijacking Vulnerability **
> I have 7 PC's here at home, all of them are Linux.
Your cock waving has no effect I'm afraid.
> It's not FUD, it's FACT.. I know it from experiance.
If I can restate your premise:
----- "Every fscking worm/backdoor is allowed to call home" Simple. Don't use Windows.. That's a Windows problem. -----
It's not even factual let alone borne of experiance [sic].
It's about a firewall rule. And it sounds like a simple NAT. It doesn't even have anything to do with Operating Systems
>I quit using Windows in August of 2002 and have not had a single worm, virus, trojan, backdoor, hack, sneeze, fart, or burp since..
I've been using Windows since 1987 and have never suffered from any of those things.
> I didn't just fall off of the turnip truck...
Nope, sounds like you stayed right on the top of the pile
** A vulnerability has been discovered in the Linux kernel which can be exploited using the ptrace() system call. By attaching to an incorrectly configured root process, during a specific time window, it may be possible for an attacker to gain superuser privileges.
The problem occurs due to the kernel failing to restrict trace permissions on specific root spawned processes.
This vulnerability affects both the 2.2 and 2.4 Linux kernel trees.
as I was typing it I had the nagging doubt that something was wrong. It was too much trouble to verify. I knew people would know what I was getting at.
An other reason for shifting taxation to expenditure is that people who work cash in hand or have other professions where paying tax on wages is, shall we say, complicated are forced to pay tax when they spend their money. So make a "cool 20 gee" from "slinging rock" go spend it all on a sportscar and Her Majesty will still get her 3,500 from the V.A.T. thank you very much.
It's also easier [in theory] to administer 1000 V.A.T. registered shops than 1,000,000 PAYE registered workers.
PNG is used as part of MS Office Documents for their binary picture data, so one suspects that making it work in IE will make more things break elsewhere.
they day the bot switches to grapple and follows PCs round laughing at their hopelessness all the while grappling them to death I'll know their finished.
Or shooting someone with shotgun cos they'll fall backwards into the lava.
Played DAOC to level 36 but the very repetitive game play for the non PVP was getting too tedious.
MOBs always fought in the same patterns and the Environment didn't seem suited to the Mobs. I mean why are 4 skeleetons that drop Uber armour just stood in a square on a hillside, with another 4, 50 feet away, it just wasn't immersive enough.
They are tough acts to follow as no doubt EQ could just seem like a grind fest now.
All the upcoming MMORPGs, like all games I guess, really have their work cut out to be the defining title of their class.
I'll Beta-testing for SWG atm. so I can't say anything about that title.
DAoC was/is let down by "not enough items". If you meet someone the same class as you at the same level, chances are they'll have the same gear on.
I hope that DAoC has changed (it's been a while - not since the expansion in fact) in this respect as the game was quite good fun.
Not when you can't trust the compiler
on
Would You Use SELinux?
·
· Score: 3, Insightful
The moral is obvious.
You can't trust code that you did not totally create yourself. (Especially code from companies that employ people like me.) No amount of source-level verification or scrutiny will protect you from using untrusted code. In demonstrating the possibility of this kind of attack, I picked on the C compiler. I could have picked on any program-handling program such as an assembler, a loader, or even hardware microcode. As the level of program gets lower, these bugs will be harder and harder to detect. A well installed microcode bug will be almost impossible to detect.
sshnet doesn't present a remote filesystem as local
plan9 does that all over but certainly not via a remote machines SSH server afaik
What one could do though it sshnet into the remote machine (M) and utilise M's TCP stack. Now all network commands for this process group only will use M's TCP stack.
Then we use ftpfs to present M's ftp service as files in our tree for this process group.
No kernel modules required
And any processes that get forked from our group will have those those remote files available via SSH and they won't have to even know anything about ftp or ssh or squat didly about anything except manipulating files.
Putting something in the kernel that is manipulated by third parties seems a bit too trusting for my liking.
that way when a request for a page that ends in.html is not in the document_root then index.php get's called instead and you can use the $_SERVER['REQUEST_URI'] to see what page was required.
IBM might well be the hand holder of OpenSource freedom these days but the company is bigger and darker than it's Linux initiative.
IBM Global Services started life as The Third Reich's data center when they [literally] muscled in to the punch card market, dominated it, and then leased the Nazi's the machines and sold them billions of punch cards to process everything from the railroads to the work rota's of the death camps.
Did you not ever wonder how the SS identified & catalogued millions of people. It certainly wasn't with pen & paper.
In 1937 IBM founder Thomas Watson was even given Germany's highest honour for a non-German, "The Cross of the German Eagle". It was not until 1940, while the bombs where dropping on Europe, that he reluctantly returned it.
They even managed to get their equipment back from the camps when they were liberated !
The path to redemption is public revelation You cannot be forgiven, until you say sorry.
Slashdot Mirror
because if you'd actually learned anything in the same 20 years that I've been working in IT it is that there is no "magic platform" that's invulnerable to sloppy coding be it windows, linux, AIX, plan9, OpenBSD or whatever.
:
:
Go read Security Focus and count the number of "Design Errors"
Here's one from today's front page
Linux Kernel Privileged Process Hijacking Vulnerability **
> I have 7 PC's here at home, all of them are Linux.
Your cock waving has no effect I'm afraid.
> It's not FUD, it's FACT.. I know it from experiance.
If I can restate your premise
-----
"Every fscking worm/backdoor is allowed to call home"
Simple. Don't use Windows.. That's a Windows problem.
-----
It's not even factual let alone borne of experiance [sic].
It's about a firewall rule. And it sounds like a simple NAT. It doesn't even have anything to do with Operating Systems
>I quit using Windows in August of 2002 and have not had a single worm, virus, trojan, backdoor, hack, sneeze, fart, or burp since..
I've been using Windows since 1987 and have never suffered from any of those things.
> I didn't just fall off of the turnip truck...
Nope, sounds like you stayed right on the top of the pile
** A vulnerability has been discovered in the Linux kernel which can be exploited using the ptrace() system call. By attaching to an incorrectly configured root process, during a specific time window, it may be possible for an attacker to gain superuser privileges.
The problem occurs due to the kernel failing to restrict trace permissions on specific root spawned processes.
This vulnerability affects both the 2.2 and 2.4 Linux kernel trees.
1. how do you know?
2. your computer != all non windows setups
3. 10 Months is not a long time
4. Robert Morris
as I was typing it I had the nagging doubt that something was wrong. It was too much trouble to verify. I knew people would know what I was getting at.
if the axis of rotation was the x (horizontal) axis then indeed it would be
d5d
however if the axis of rotation was either of the remaing axes then the result would be
b5b
An other reason for shifting taxation to expenditure is that people who work cash in hand or have other professions where paying tax on wages is, shall we say, complicated are forced to pay tax when they spend their money. So make a "cool 20 gee" from "slinging rock" go spend it all on a sportscar and Her Majesty will still get her 3,500 from the V.A.T. thank you very much.
It's also easier [in theory] to administer 1000 V.A.T. registered shops than 1,000,000 PAYE registered workers.
If you can read this, you're too close
It's a kind of shitty question.
One suspects it's more of an advert
I must get one of those
one sides suggests something
the other says "ok"
if not the grind continues until you win/lose in court or you can't afford to send any more letters
PNG is used as part of MS Office Documents for their binary picture data, so one suspects that making it work in IE will make more things break elsewhere.
http://www.vitanuova.com/inferno
It's a Virtualised OS in Windows/FreeBSD/Linux,plan9 and also runs native on x86, ARM & others
Dennis Ritchie is one of it's fathers, what more could you ask for?
Virtualising the OS means it's feels like the bare metal but's it's just a reflection map.
It truly is "write once, run anywhere".
they day the bot switches to grapple and follows PCs round laughing at their hopelessness all the while grappling them to death I'll know their finished.
Or shooting someone with shotgun cos they'll fall backwards into the lava.
Or camp under the stairs when their bored
etc.etc.etc.
Dr. Spock does the baby book dude
it's for machines
I T_ and_Management_Systems/
d _M anagement_Systems/York/
url's provide a context for the content
s'all about the page ranking
The search parameter order randomness is not unworkable, it already does that for the last two items
http://www.thebigchoice.com/Graduate_Jobs/York/
and
http://www.thebigchoice.com/Graduate_Jobs/IT_an
yield (almost) the same page (the url affects the H1 you see)
I started my EQ account in July 1999
Played DAOC to level 36 but the very repetitive game play for the non PVP was getting too tedious.
MOBs always fought in the same patterns and the Environment didn't seem suited to the Mobs. I mean why are 4 skeleetons that drop Uber armour just stood in a square on a hillside, with another 4, 50 feet away, it just wasn't immersive enough.
They are tough acts to follow as no doubt EQ could just seem like a grind fest now.
All the upcoming MMORPGs, like all games I guess, really have their work cut out to be the defining title of their class.
I'll Beta-testing for SWG atm. so I can't say anything about that title.
DAoC was/is let down by "not enough items". If you meet someone the same class as you at the same level, chances are they'll have the same gear on.
I hope that DAoC has changed (it's been a while - not since the expansion in fact) in this respect as the game was quite good fun.
All you need is the will, the drive, the talent, and the know-how.
Well, that's a short list just anyone could sort out in a weekend
My set theory disagrees
Hemp isn't marijuana but marijuana is hemp.
The moral is obvious.
You can't trust code that you did not totally create yourself. (Especially code from companies that employ people like me.) No amount of source-level verification or scrutiny will protect you from using untrusted code. In demonstrating the possibility of this kind of attack, I picked on the C compiler. I could have picked on any program-handling program such as an assembler, a loader, or even hardware microcode. As the level of program gets lower, these bugs will be harder and harder to detect. A well installed microcode bug will be almost impossible to detect.
sshnet doesn't present a remote filesystem as local
plan9 does that all over but certainly not via a remote machines SSH server afaik
What one could do though it sshnet into the remote machine (M) and utilise M's TCP stack.
Now all network commands for this process group only will use M's TCP stack.
Then we use ftpfs to present M's ftp service as files in our tree for this process group.
No kernel modules required
And any processes that get forked from our group will have those those remote files available via SSH and they won't have to even know anything about ftp or ssh or squat didly about anything except manipulating files.
Putting something in the kernel that is manipulated by third parties seems a bit too trusting for my liking.
I use a neat Apache rewriting trick
/index.php [T=application/x-httpd-php,L]
.html is not in the document_root then index.php get's called instead and you can use the $_SERVER['REQUEST_URI'] to see what page was required.
d _M anagement_Systems/York/
o n= Graduate_Jobs&job_section=IT_and_Management_System s&area=York
RewriteCond %{REQUEST_FILENAME} !-s
RewriteRule ^(.*\.html$|.*/$)
that way when a request for a page that ends in
the world is an easier place when
http://www.thebigchoice.com/Graduate_Jobs/IT_an
is the URI instead of
http://www.thebigchoice.com/show_jobs.php?secti
that's what the include path is for
Are you reasonably suggesting that the Linux world would collapse if IBM killed it's Linux legion?
& if it's big enough you might need a pocket map !
Don't forget a pocket torch in case you fall inside it!
You could see how deep it is by timing your fall with the in-built pocket watch!
I'm so funny !
How would we have worked it out without you!
IBM might well be the hand holder of OpenSource freedom these days but the company is bigger and darker than it's Linux initiative.
IBM Global Services started life as The Third Reich's data center when they [literally] muscled in to the punch card market, dominated it, and then leased the Nazi's the machines and sold them billions of punch cards to process everything from the railroads to the work rota's of the death camps.
Did you not ever wonder how the SS identified & catalogued millions of people. It certainly wasn't with pen & paper.
In 1937 IBM founder Thomas Watson was even given Germany's highest honour for a non-German, "The Cross of the German Eagle". It was not until 1940, while the bombs where dropping on Europe, that he reluctantly returned it.
They even managed to get their equipment back from the camps when they were liberated !
The path to redemption is public revelation
You cannot be forgiven, until you say sorry.
http://www.edwinblack.com