What if the page hack actually subtley changed the web site instead of "owning" the home page. I bet there are a few of them around, unreported and unfixed. As web applications grow this kind of unathorized entry could be a real menace. For now I'm glad the www crackers are having fun because it should make it harder for the feds sneak in via the web door.
I worked at an ISP and people building web sites for big clients seemed quite happy to put the database INSIDE the web space. Happy that ftp would protect them and that not publishing the url to the db was enough to keep it safe. I did manage to help the few I spotted but god knows how many were content to do that. Frontpage Extensions use an _private directory that is excluded from the web space but if doodz can hack in I don't know what they can get to and extract.
Changing form pages to direct the script elsewhere or changing the scripts themselves to do something different are two exploits. If the overall result to the website is the same how long before someone notices?
Hopefully Webpage hacks are important because their footprints help make better bolts for the stable doors.
RSA getting done is ironically funny.
Servers are only as safe as their weakest link. Which is the weakest NT, Redhat, sysadmin, dept. budget, webmaster, client demands, browesr? As each tier presents itself the complexity opens holes on it's own as the application often overeaches the capabilities of one of the functional units. "Get the job done" can "Do the right thing" in the mind of the person who pays the piper.
All the guy said was that the library wasn't in the country called Holland. He never asserted that there was a country called Holland or that this supposed place was in Western Europe. It was You who made the confusion with the Netherlands.
btw. is it called "The Netherlands" in Dutch? Do you call France "Francais"?
people are people you know who's to say Bill wasn't too busy laughing too he might be blood stained but the straight jacket of office surely is too much. The media doesn't let it's chosen subjects be human in a natural way. Remember Yeltsin getting pissed and dancing on TV, imagine Bush doing that! (it was funny as fuck that day he fell in his dinner though)
The transmeta thing made me look into the world of open-source hardware and I was pleasantly surprised to find it was bigger than I thought it would be, I guess it doesn't shout loud enough.
To my mind the success of OSS is that usually the best apps are created by one group to solve a specific problem they have and their efforts are shared with the world so that no sweat of human endeavour is wasted on re-inventing the wheel. Think Linux / TeX / php / MySQL / gcc etc. etc.
As much as I try and convince myself that hardware is different I can't. All I can think of is the cost involved in building a fab or whatever. In OS theory I should be able to drive to my local Fabs-R-Us and ask them to build me the chip from the design I have on disk.
I was disappointed to hear in the Webcast that Transmeta are not even going to release the Instruction Set! "No need, just write x86 code" because "The instruction set is not fixed"
Linus is not a god no matter what people think / say from what I gather he was taken on to:
Squeeze Mobile Linux into ROM
Buy some PR
Play Quake
Mobile Linux will be OS.
OS hardware I'm sure will gain strength and momentum just like OS software did and we'll all be better off.
Inventions are funnelled through great minds. Without those who have gone before you will probably struggle to discover fire or the wheel. Humean inventiveness is more like Darwinian evolution than Larmakian. .oO0Oo.
DNA is not randomly distributed. It changes a bit between parent and child. Using 6 loci there is a chance that someone else in your home town will match you. As more and more people are added to the database more and more false matches will occur. This system can only be relied upon to "prove" guilt where every loci is tested. Proving "innocence" of course only requires one non-matching loci. Although a valuable tool to the state it's infallability is overstated to juries with the "millions to one" maths smokescreen. I expect it is more usually used as something to present to the defendant to make him/her confess and if they don't who cares, the jury will believe it anyway!
you are only allowed to watch a rented movie with members of your family in your own home - just like the music you buy. It is a breach to play a record to your friend when he comes round your house. .oO0Oo.
design your own park and bring your friends round for a quick roll round. You could even make it more realistic by adding the focus on the chat part so doods could just hang out down the virtual shopping arcade together skating in and out of pigeons and pensioners. Hey add on a dcc like file system and they could trade mp3's too:)
They sponsored some skiiing or lugeing or some such ice-based activity I was at a friends house at Christmas and got a Linux surprise. I don't get Cable so I don't know how many more they've done.
According to the Hacker lexicon Term coined in March 1998 following the Mozilla release to describe software distributed in source under licenses guaranteeing anybody rights to freely use, modify, and redistribute, the code. As for the rest - the directx guy is a pretty lame. Strikes me as someone who's read too many PC magazines. .oO0Oo.
by the time they thought to put directories in they'd already got saddled with \ 'cos for some insane reason they'd used / for options so if you had a directory/V then copy *.*/v Would be a problem because/v is the option to verify the copy (which incidentally only verifies that a file was written not that the data is correct) This is also a lose lose because the \ key is one of those keys that moves around on international keyboards and their key-maps. It pays to keep in mind that you can get to it using alt-092.
Slashdot Mirror
What if the page hack actually subtley changed the web site instead of "owning" the home page. I bet there are a few of them around, unreported and unfixed. As web applications grow this kind of unathorized entry could be a real menace. For now I'm glad the www crackers are having fun because it should make it harder for the feds sneak in via the web door.
I worked at an ISP and people building web sites for big clients seemed quite happy to put the database INSIDE the web space. Happy that ftp would protect them and that not publishing the url to the db was enough to keep it safe. I did manage to help the few I spotted but god knows how many were content to do that. Frontpage Extensions use an _private directory that is excluded from the web space but if doodz can hack in I don't know what they can get to and extract.
Changing form pages to direct the script elsewhere or changing the scripts themselves to do something different are two exploits. If the overall result to the website is the same how long before someone notices?
Hopefully Webpage hacks are important because their footprints help make better bolts for the stable doors.
RSA getting done is ironically funny.
Servers are only as safe as their weakest link.
Which is the weakest NT, Redhat, sysadmin, dept. budget, webmaster, client demands, browesr?
As each tier presents itself the complexity opens holes on it's own as the application often overeaches the capabilities of one of the functional units. "Get the job done" can "Do the right thing" in the mind of the person who pays the piper.
All the guy said was that the library wasn't in the country called Holland. He never asserted that there was a country called Holland or that this supposed place was in Western Europe. It was You who made the confusion with the Netherlands.
btw. is it called "The Netherlands" in Dutch?
Do you call France "Francais"?
people are people you know
.oO0Oo.
who's to say Bill wasn't too busy laughing too
he might be blood stained but the straight jacket of office surely is too much. The media doesn't let it's chosen subjects be human in a natural way. Remember Yeltsin getting pissed and dancing on TV, imagine Bush doing that! (it was funny as fuck that day he fell in his dinner though)
yup, put instructions into little bits of sand and you can close the doors as tightly as you like.
.oO0Oo.
:-)
.oO0Oo.
I'm sure it's a typo but I like it
.oO0Oo.
One minute I was reading away
.oO0Oo.
the next poof! gone.
I guess I'll have to wait a few days
The transmeta thing made me look into the world of open-source hardware and I was pleasantly surprised to find it was bigger than I thought it would be, I guess it doesn't shout loud enough.
To my mind the success of OSS is that usually the best apps are created by one group to solve a specific problem they have and their efforts are shared with the world so that no sweat of human endeavour is wasted on re-inventing the wheel. Think Linux / TeX / php / MySQL / gcc etc. etc.
As much as I try and convince myself that hardware is different I can't. All I can think of is the cost involved in building a fab or whatever. In OS theory I should be able to drive to my local Fabs-R-Us and ask them to build me the chip from the design I have on disk.
I was disappointed to hear in the Webcast that Transmeta are not even going to release the Instruction Set! "No need, just write x86 code" because "The instruction set is not fixed"
Linus is not a god no matter what people think / say from what I gather he was taken on to :
- Squeeze Mobile Linux into ROM
- Buy some PR
- Play Quake
Mobile Linux will be OS.OS hardware I'm sure will gain strength and momentum just like OS software did and we'll all be better off.
Anonymous Flame
.oO0Oo.
Anonymous At Work
Anonymous 1-800 You Suck
nt
.oO0Oo.
Unless you have unlimited funds and unlimited time, you can never "fix" all bugs.
.oO0Oo.
Go take a look at the TeX web site
Inventions are funnelled through great minds. Without those who have gone before you will probably struggle to discover fire or the wheel. Humean inventiveness is more like Darwinian evolution than Larmakian.
.oO0Oo.
DNA is not randomly distributed. It changes a bit between parent and child. Using 6 loci there is a chance that someone else in your home town will match you. As more and more people are added to the database more and more false matches will occur. This system can only be relied upon to "prove" guilt where every loci is tested. Proving "innocence" of course only requires one non-matching loci.
.oO0Oo.
Although a valuable tool to the state it's infallability is overstated to juries with the "millions to one" maths smokescreen.
I expect it is more usually used as something to present to the defendant to make him/her confess and if they don't who cares, the jury will believe it anyway!
because with Open Source you can see right inside
.oO0Oo.
you are only allowed to watch a rented movie with members of your family in your own home - just like the music you buy. It is a breach to play a record to your friend when he comes round your house.
.oO0Oo.
It would certain make all those bot's that just flip you over a bit useless
.oO0Oo.
it's way cool
.oO0Oo.
oh the possibilities.
:)
.oO0Oo.
design your own park and bring your friends round for a quick roll round. You could even make it more realistic by adding the focus on the chat part so doods could just hang out down the virtual shopping arcade together skating in and out of pigeons and pensioners. Hey add on a dcc like file system and they could trade mp3's too
Socialism doesn't start with concentration camps, that's where it ends.
.oO0Oo.
'cos I sure hate fish
.oO0Oo.
nt
.oO0Oo.
They sponsored some skiiing or lugeing or some such ice-based activity
.oO0Oo.
I was at a friends house at Christmas and got a Linux surprise. I don't get Cable so I don't know how many more they've done.
According to the Hacker lexicon
.oO0Oo.
Term coined in March 1998 following the Mozilla release to describe software distributed in source under licenses guaranteeing anybody rights to freely use, modify, and redistribute, the code.
As for the rest - the directx guy is a pretty lame. Strikes me as someone who's read too many PC magazines.
by the time they thought to put directories in they'd already got saddled with \ 'cos for some insane reason they'd used / for options so if you had a directory /V then /v /v is the option to verify the copy (which incidentally only verifies that a file was written not that the data is correct)
.oO0Oo.
copy *.*
Would be a problem because
This is also a lose lose because the \ key is one of those keys that moves around on international keyboards and their key-maps. It pays to keep in mind that you can get to it using alt-092.
wired n that ;)
.oO0Oo.