Maybe if the elaborate sequence required to do a reliable read/write were put in a standard library, rather than expecting it to be correctly open-coded by every bit of application code, it would be used a bit more often.
Just because it's not specifically optimized for other languages doesn't mean that it isn't better than QWERTY for many of them, or that you couldn't apply the same principles to come up with an optimized layout for other languages.
I'm not a "proper" keyboardist either, and I greatly prefer Dvorak. It wasn't very long after switching that the experience and muscle memory effect kicked in with the new layout -- and I no longer feel like my fingers are being tied into knots.
And hence the government we have today. If we have to deal with the stupid implications of the Federal government's power grab, we should at least benefit from the positive steps that the Congress has taken.
So we should continue to fuck over the environment (a.k.a. the future of the human race) in order to prop up NASDAQ? We need to find ways to accomplish economic necessities without killing the planet in the meantime. Nuclear, solar, wind, hydro, etc. are a great place to start, despite opposition to some elements thereof (OMG, reprocessing nuclear fuel looks like weapons production!!!).
So you think individual households shouldn't be responsible for what they do to our environment? They shouldn't pay the true cost of the gas they burn in their Hummer?
The point is, we should try to have as little impact on our environment as possible, since we've shown ourselves to be clueless as to the actual effects of what we've already done.
Really? Trolls have a posting history as long as mine? I must be one dedicated troll.
A userid in the millions has a posting history? I hadn't noticed.
I can only hope that economic incentives will modify your behavior before we're all fucked.
The problem with that is that most things aren't statically compiled. And no, it's not old versions of GCC or Apache that I want to run, but older games, including those by a certain porting house that went out of business and can't release patches.:-)
Canadian speaking. Yes you are right that people will curse at socialized medicine as we do. Like recently when I got a booboo on my finger (stupid hammer) and the emergency room wait was about 2 hours. This is annoying, but not deadly.
It's also not much different than what you'd experience at a private hospital in the U.S.
It's nothing to do with interstate commerce, but rather this, from Article 1, Section 4:
The Times, Places and Manner of holding Elections for Senators and Representatives, shall be prescribed in each State by the Legislature thereof; but the Congress may at any time by Law make or alter such Regulations, except as to the Place of Chusing Senators.
I don't think it'd be considered preparation of a derivative work, since it'd presumably be an algorithmic process with no creative input, similar to encoding a CD into mp3.
However, given that it's also illegal to unauthorizedly distribute the music without producing a derivative work, it's something of a moot point.
English pronunciation in the southern part of Europe is sometimes nearly incomprehensible, while it's much better in northern countries like Germany, the Netherlands and Germany.
But what about Germany?:-)
It also probably helps that languages such as German and Dutch are more closely related to English than the Romance languages are, and have more of the same sounds (especially vowels).
Don't you just hate it when someone follows up a joke with another joke, and the humorless git who posted the original thinks the other person "just didn't get it"?
If anything's tied up in closed source, it's Linux. There isn't any provision in the CDDL that prohibits combination with non-CDDL works; it'd be a Linux copyright holder that'd have to sue you to stop it.
The only reason why software EULAs have any traction at all is that installing software onto a computer requires copying of copyrighted files to the hard drive. In the case of an integrated computer system, the software has already been installed. I take the position that any software advertised as part of the purchase is, well, part of the purchase. The legalities of getting that software onto the computer's hard drive have been worked out between the publisher and integrator are their affair, not mine.
Actually, in the US, it's been worked out by Congress. 17 USC 117 says that you're allowed to make incidental copies of software that you own that are necessary in order to use the software. So even the EULAs on non-preinstalled software are on pretty shaky legal ground.
A denial of service is the last thing someone wants if they're trying to break in to your system..
Of course. However, there's more than just one kind of attacker out there, and making things harder for the break-in sort doesn't mean that buffer overflows aren't a problem for the DoS sort. I wouldn't particularly like my browser to crash every time it loads an image that someone linked from a server whose admin got pissed, and switched it to a malicious PNG. Sure, it's less serious than a break-in, but still enough of a problem that buffer overruns shouldn't be called "solved" by the NX bit.
As for failed break-ins knocking out the server and preventing future break-ins, odds are if they overflow a buffer using the wrong exploit for the particular target, it'd crash anyway, so the NX bit doesn't really improve things much there either, other than causing existing exploits to become the wrong ones. New exploits that are targeted at NX systems will still work on non-NX systems, so in the long run it doesn't do much to increase diversity, either.
That's not to say that NX isn't useful as a short-term band-aid; it just shouldn't be treated as anything more than that.
Non-executable stack/data does not solve buffer overflows; it just makes them harder. You can still overwrite the return address on the stack to point to a library function that you want to run, with arguments you specify on the stack (perhaps a library function that disables the no-exec bit, or a call to system()?) It's a bit trickier since, depending on the type of overflow, you may have to avoid embedded 0 bytes in the attack string, but it's still possible unless all library and program function addresses have embedded zero bytes (and that doesn't help if the overflow is from memcpy() or some other non-zero-terminated buffer).
And even if the NX bit does stop the buffer overflow from running code on the target, it can still be used to crash the target as a denial-of-service attack.
Slashdot Mirror
Maybe if the elaborate sequence required to do a reliable read/write were put in a standard library, rather than expecting it to be correctly open-coded by every bit of application code, it would be used a bit more often.
Just because it's not specifically optimized for other languages doesn't mean that it isn't better than QWERTY for many of them, or that you couldn't apply the same principles to come up with an optimized layout for other languages.
I'm not a "proper" keyboardist either, and I greatly prefer Dvorak. It wasn't very long after switching that the experience and muscle memory effect kicked in with the new layout -- and I no longer feel like my fingers are being tied into knots.
And hence the government we have today. If we have to deal with the stupid implications of the Federal government's power grab, we should at least benefit from the positive steps that the Congress has taken.
What, exactly, did the court rule that went beyond what environmentalists (a.k.a. patriots) wanted in this case?
Uhh, you do realize the CO2 they exhale comes from the food they eat, which is grown in their lifetimes (and thus is a closed carbon cycle), right?
So we should continue to fuck over the environment (a.k.a. the future of the human race) in order to prop up NASDAQ? We need to find ways to accomplish economic necessities without killing the planet in the meantime. Nuclear, solar, wind, hydro, etc. are a great place to start, despite opposition to some elements thereof (OMG, reprocessing nuclear fuel looks like weapons production!!!).
So you think individual households shouldn't be responsible for what they do to our environment? They shouldn't pay the true cost of the gas they burn in their Hummer?
The point is, we should try to have as little impact on our environment as possible, since we've shown ourselves to be clueless as to the actual effects of what we've already done.
Really? Trolls have a posting history as long as mine? I must be one dedicated troll.
A userid in the millions has a posting history? I hadn't noticed. I can only hope that economic incentives will modify your behavior before we're all fucked.
I've had to log in and let the customs officer snoop around on my laptop when entering Canada via a land crossing.
Generally, when there are multiple posts with a similar sentiment, it's a bit silly to mod the first one redundant...
Would you buy a new Metallica album, despite St. Anger?
The problem with that is that most things aren't statically compiled. And no, it's not old versions of GCC or Apache that I want to run, but older games, including those by a certain porting house that went out of business and can't release patches. :-)
Canadian speaking. Yes you are right that people will curse at socialized medicine as we do. Like recently when I got a booboo on my finger (stupid hammer) and the emergency room wait was about 2 hours. This is annoying, but not deadly.
It's also not much different than what you'd experience at a private hospital in the U.S.
It's nothing to do with interstate commerce, but rather this, from Article 1, Section 4:
The Times, Places and Manner of holding Elections for Senators and Representatives, shall be prescribed in each State by the Legislature thereof; but the Congress may at any time by Law make or alter such Regulations, except as to the Place of Chusing Senators.
I don't think it'd be considered preparation of a derivative work, since it'd presumably be an algorithmic process with no creative input, similar to encoding a CD into mp3.
However, given that it's also illegal to unauthorizedly distribute the music without producing a derivative work, it's something of a moot point.
English pronunciation in the southern part of Europe is sometimes nearly incomprehensible, while it's much better in northern countries like Germany, the Netherlands and Germany.
But what about Germany? :-)
It also probably helps that languages such as German and Dutch are more closely related to English than the Romance languages are, and have more of the same sounds (especially vowels).
Don't you just hate it when someone follows up a joke with another joke, and the humorless git who posted the original thinks the other person "just didn't get it"?
If anything's tied up in closed source, it's Linux. There isn't any provision in the CDDL that prohibits combination with non-CDDL works; it'd be a Linux copyright holder that'd have to sue you to stop it.
The only reason why software EULAs have any traction at all is that installing software onto a computer requires copying of copyrighted files to the hard drive. In the case of an integrated computer system, the software has already been installed. I take the position that any software advertised as part of the purchase is, well, part of the purchase. The legalities of getting that software onto the computer's hard drive have been worked out between the publisher and integrator are their affair, not mine.
Actually, in the US, it's been worked out by Congress. 17 USC 117 says that you're allowed to make incidental copies of software that you own that are necessary in order to use the software. So even the EULAs on non-preinstalled software are on pretty shaky legal ground.
No, x64 and ARM both use 4K pages (though ARM has 1K subpages that you can set permissions on individually). Alpha and sparc64 use 8K pages, though.
The bottom corners are indeed prime real estate... what other keys can be easily pressed with the side of one's palms?
A denial of service is the last thing someone wants if they're trying to break in to your system..
Of course. However, there's more than just one kind of attacker out there, and making things harder for the break-in sort doesn't mean that buffer overflows aren't a problem for the DoS sort. I wouldn't particularly like my browser to crash every time it loads an image that someone linked from a server whose admin got pissed, and switched it to a malicious PNG. Sure, it's less serious than a break-in, but still enough of a problem that buffer overruns shouldn't be called "solved" by the NX bit.
As for failed break-ins knocking out the server and preventing future break-ins, odds are if they overflow a buffer using the wrong exploit for the particular target, it'd crash anyway, so the NX bit doesn't really improve things much there either, other than causing existing exploits to become the wrong ones. New exploits that are targeted at NX systems will still work on non-NX systems, so in the long run it doesn't do much to increase diversity, either.
That's not to say that NX isn't useful as a short-term band-aid; it just shouldn't be treated as anything more than that.
Non-executable stack/data does not solve buffer overflows; it just makes them harder. You can still overwrite the return address on the stack to point to a library function that you want to run, with arguments you specify on the stack (perhaps a library function that disables the no-exec bit, or a call to system()?) It's a bit trickier since, depending on the type of overflow, you may have to avoid embedded 0 bytes in the attack string, but it's still possible unless all library and program function addresses have embedded zero bytes (and that doesn't help if the overflow is from memcpy() or some other non-zero-terminated buffer).
And even if the NX bit does stop the buffer overflow from running code on the target, it can still be used to crash the target as a denial-of-service attack.