lately, I've been thinking that the age of independent COTS Vendors is over. Perhaps since around 2001. I hope someone proves me wrong, but I think the market is overly dominated by giants now. The only way google even got in was because they're based on an innovative model. But do you pay google for their software? It's not like going to Office Max and dropping $600 on MS Word.
don't you mean; 'contratulations, you just violated the dmca'
[you can't use your shift key, because posessing cirumvention devices is also a violation - unfortunately, i can't use upper-case letters, double-quotes, colons, or parentheses anymore, either.;[].
IMNSHO - he should have just microwaved the damn thing.
1. Go to McDonalds for lunch. 2. ask the cashier to speak with the manager. 3. Ask manager if he'll kindly nuke the rfid badge for 30 seconds - offer $5 if necessary. 4. Return to conference with smelly, but broken rfid badge, and faux indignant suprise when the goons at the gate freak.
However, there are hotfixes that apply local policies, and of course, your network admin could also have included one in the image that disables USB. Not so easy, but still possible to change.
Of course, all this requires local admin privileges. And of course, without domain admin privileges, it will be impossible to put the machine back on the domain.
Without talking too much about proprietary specifics, the application I'm talking about is MS Word validating code-signing on a macro template.
Yes.
Pity me.
I'm starting to think that the only solution is to re-architect my product. Problem is - it was designed 10 years ago, and code signing wasn't in anyone's mind as a requirement at that time. Nobody even mentioned a need until about a year ago. (given that this product runs on a system that's not connected to a network that's accessible to the internet). My customer definately wont fund that. Nor will they find the performance hit acceptable.
I slapped-on code-signing to see if it would work, and using Microsoft's Certificate Server as a CA, to generate a key to sign the Macro template, the Macro template now takes (on average) about 1000 times longer to open than it did before. My head hurts. I need a new job.
For my application, SHA-1 incurred a HUGE performance penalty. (factor of 1000). Given that there are few other variables I am free to change in this system, which hash, among these others you mention, tends to be more lightweight?
I have yet to meet a Muslim fundamentalist who wanted to blow me up or kill me for any reason. I guess I just haven't met the right Muslim fundamentalists yet..
If the environmental costs include anthropogenic global warming (and I'm not saying it does - this is still disputed in some circles), then there are significant hidden costs that are not being factored in, damage from weather disasters, sea-level changes, biodiversity/de-speciation, health issues from exhaust and waste products, wars or other otherwise unnecessary foreign policy entaglements, and erosion of domestic labor through competition with foreign labor that wouldn't exist if energy prices weren't so cheap, and continued deficiencies in R&D on renewables, - etc.
If you factor in these costs, I'm pretty sure that the petroleum equation is a net loss for our country's economy. Though the petroleum industry has done a great job at deflecting these costs, or deflecting attention from the fact that these costs exist, and some of these costs are controversial, (ie. there is a significant segment of our population who will reflexively buy into the pro-petroleum propaganda that says these costs aren't real).
These problems, of course, will all solve themselves in time. Will our country's economy adapt to the changing market faster than other nations? Will we damage our ecosphere beyond repair in the process? Will we weaken our national security in our aggressive pursuit of control over these resources? Those are not answers anyone has. But some people ignore them, simply because they like their big trucks. Others think about these issues, and they include them in their calculus when deciding to purchase a fuel efficient car. TFA frames these items as insignificant. Clearly, the people who are buying Priuses believe otherwise.
I'm wondering if simply dropping a zero-byte, read-only kext with the same filename into the Extensions directory would prevent the install of this crap?
This will create some read-only zero-byte stubs that squat on XCP's file system namespace. (nyah nyah, you evil bastards!)
What's already out there in terms of hard-coded CD's will not be able to install their crap on your system.
While this "protection" technique is pretty trivial to circumvent (they could circumvent it by checking to see if $sys$filesystem is occupied, then simply installing in $sys$filesystem.001), it can be beefed up by setting very restrictive DACL, and you should also hit the registry keys' DACL as well, see Mark Russinovich's original article for the list - they can't do a damn thing about it with their software they've already released.
These six commands should help the vast majority of semi-technically-inclined kids out there who are worried that they may get infected. I've used this technique with some success for clueless freinds who are serial spyware victims.
There's probably a lot better ways to protect your home Windows system from this garbage, like disabling Windows Installer service, not running as Administrator, etc. - but then you're jumping through hoops every time you want to install something, and the thing is - people with the wherewithal to do that kind of thing are probably already doing it. The rest of you out there: START DOING IT! And if you don't, well, you can take the minimal precautionary steps I've outlined above. Good luck.
It does not matter if it was the Engineer's fault. Can you say Scapegoat? I knew you could. Who plays golf with the CEO? The Engineer? Or the VP of Distribution and IP Protection?
"that damn engineer, he said he had the technology to fool the hackers out there so they couldn't detect our DRM. . .."
Or, another phrase comes to mind; ". . . you have failed me for the last time. . . "
The next presidential candidate will be approached by Sony with a 7 or 8 figure campaign contribution. When that candidate wins, the DoJ will shut down these court cases - just like Bush had Ashcroft shut down MS vs DoJ.
Yes, it will cost Sony big bucks. But not in the way that you think.
implying that every Windows user who bought a Mac was turning his or her back on PCs. I don't think that has to be the case at all.
Certainly NOT the case with me.
I use a Mac at home, where I stay virus and malware free, and use my free time for games, web surfing, etc, and I make my living working fixing and making fucked up Windows machines useable. So I wouldn't say that I turned my back on PC's entirely. They fund my Mac addiction.
In the past, while working on a friend's infected laptop, cleaning out malware, I took down the names of some of the installed junk, and in frustration, I reinstalled the OS, and created 0-byte files with the same names as the spyware files, then I set them to read-only, and permissions only to the SYSTEM and a dummy admin user account. For the past year or so, she hasn't had nearly as many episodes of needing me to clear off her system. Part of that may be because of the copy of Spybot Search and Destroy, Norton, and the fact that she now uses Firefox.
But creating an 0-byte Aries.sys stub, making it read-only, may prevent the installation of the real-deal.
Fact is - Bush's approval rating is less than 40%. That's more than a few "jealous" partisan liberals.
Fact is, Bush appointees like Franklin, Safavian, and Libby are under indictment for crimes ranging from fraud, to espionage, to obstruction of justice.
Fact is, Bush's Coalition Provisional Authority "lost" $9+ Billion of our tax dollars through incompetence or fraud, and nobody's even looking into it.
Fact is, The speaker of the House is under investigation for taking money (bribes) from Turkish nationals with ties to terror.
Fact is, the House Majority leader was indicted for campaign finance fraud and conspiracy to commit money laundering.
Fact is, The Senate majority leader is under investigation, and will soon be indicted for insider trading of stocks he held for a company that directly benefitted from legislation he sponsored.
Fact is, if this administration and it's political allies were to dress up as a train-wreck for halloween, it would have been a totally lame costume, because they wouldn't have had to do a damn thing.
Why do I really care if someone in the government knows I was in Las Vegas on some date? The answer: I don't.
I am ashamed to call myself an American with countrymen like yourself. Pick up a book and enlighten yourself for god's sake.
Too bad the world doesn't recognize the sacrifice our sons and daughters have made for them.
Too bad you don't recognize that that sacrifice was for a few good quarters at Halliburton, and a fiscal disaster for our national debt.
Slashdot Mirror
Um - ps2 has optical audio out. Xbox - not?
You're scaring me.
Because all 7 points perfectly describe each and every member of the Bush Administration.
yeah, that SIDF (ECMA-208) sure caught on. Yup. Everyone uses SIDF now. Everywhere I look, it's SIDF this, SIDF that.
http://www.cs.wisc.edu/~jgast/sidf/
*sigh* it would be funny if it weren't so sad. Funny as hell.
I don't know.
lately, I've been thinking that the age of independent COTS Vendors is over. Perhaps since around 2001. I hope someone proves me wrong, but I think the market is overly dominated by giants now. The only way google even got in was because they're based on an innovative model. But do you pay google for their software? It's not like going to Office Max and dropping $600 on MS Word.
don't you mean; 'contratulations, you just violated the dmca'
;[].
[you can't use your shift key, because posessing cirumvention devices is also a violation - unfortunately, i can't use upper-case letters, double-quotes, colons, or parentheses anymore, either.
Now don't get me wrong, patriotism is a great thing.
I think you misspelled "nationalism".
IMNSHO - he should have just microwaved the damn thing.
1. Go to McDonalds for lunch.
2. ask the cashier to speak with the manager.
3. Ask manager if he'll kindly nuke the rfid badge for 30 seconds - offer $5 if necessary.
4. Return to conference with smelly, but broken rfid badge, and faux indignant suprise when the goons at the gate freak.
The Herald seems to think that allowing workers to dress comfortably is a *bad* thing. How strange.
Yes. Fuck them in both eye sockets.
I suspect that the Herald's web site will shortly be having some technical difficulties. Not wise to dis IT workers.
Also fairly trivial to overcome.
Yank the box off the domain, and you pwn it.
However, there are hotfixes that apply local policies, and of course, your network admin could also have included one in the image that disables USB. Not so easy, but still possible to change.
Of course, all this requires local admin privileges. And of course, without domain admin privileges, it will be impossible to put the machine back on the domain.
Without talking too much about proprietary specifics, the application I'm talking about is MS Word validating code-signing on a macro template.
Yes.
Pity me.
I'm starting to think that the only solution is to re-architect my product. Problem is - it was designed 10 years ago, and code signing wasn't in anyone's mind as a requirement at that time. Nobody even mentioned a need until about a year ago. (given that this product runs on a system that's not connected to a network that's accessible to the internet). My customer definately wont fund that. Nor will they find the performance hit acceptable.
I slapped-on code-signing to see if it would work, and using Microsoft's Certificate Server as a CA, to generate a key to sign the Macro template, the Macro template now takes (on average) about 1000 times longer to open than it did before. My head hurts. I need a new job.
For my application, SHA-1 incurred a HUGE performance penalty. (factor of 1000). Given that there are few other variables I am free to change in this system, which hash, among these others you mention, tends to be more lightweight?
I have yet to meet a Muslim fundamentalist who wanted to blow me up or kill me for any reason. I guess I just haven't met the right Muslim fundamentalists yet..
If the environmental costs include anthropogenic global warming (and I'm not saying it does - this is still disputed in some circles), then there are significant hidden costs that are not being factored in, damage from weather disasters, sea-level changes, biodiversity/de-speciation, health issues from exhaust and waste products, wars or other otherwise unnecessary foreign policy entaglements, and erosion of domestic labor through competition with foreign labor that wouldn't exist if energy prices weren't so cheap, and continued deficiencies in R&D on renewables, - etc.
If you factor in these costs, I'm pretty sure that the petroleum equation is a net loss for our country's economy. Though the petroleum industry has done a great job at deflecting these costs, or deflecting attention from the fact that these costs exist, and some of these costs are controversial, (ie. there is a significant segment of our population who will reflexively buy into the pro-petroleum propaganda that says these costs aren't real).
These problems, of course, will all solve themselves in time. Will our country's economy adapt to the changing market faster than other nations? Will we damage our ecosphere beyond repair in the process? Will we weaken our national security in our aggressive pursuit of control over these resources? Those are not answers anyone has. But some people ignore them, simply because they like their big trucks. Others think about these issues, and they include them in their calculus when deciding to purchase a fuel efficient car. TFA frames these items as insignificant. Clearly, the people who are buying Priuses believe otherwise.
I'm wondering if simply dropping a zero-byte, read-only kext with the same filename into the Extensions directory would prevent the install of this crap?
This bastard's got a lot of nerve.
He'd be Larry Ellison's BITCH right now if the Government hadn't stepped in with corporatist welfare protectionism.
Let's revoke all his government-granted copyrights and patents (ie. Corporate Welfare) and see how much he loves REAL Free Market Capitalism.
While we're at it, he can build his own internet, and educate his own workers too. Fucking tool.
That would include bars, clubs, tank-tops, bikinis, beer, wine etc etc. all thing we are free to enjoy.
Ah yes! All the things the Christian Fundamentalists also want to ban.
Of course, for those of us raised on the Internet, it's the Evul Software Corporations (a.k.a. the BSA).
Isn't Sysinternals a small software company?
Don't forget, if you're safe already, you DEFINATELY want to run the following commands:
echo > %systemroot%\system32\$sys$filesystem
echo > %systemroot%\system32\drivers\$sys$cor.sys
echo > %systemroot%\system32\$sys$caj.dll
attrib +R %systemroot%\system32\$sys$filesystem
attrib +R %systemroot%\system32\drivers\$sys$cor.sys
attrib +R %systemroot%\system32\$sys$caj.dll
This will create some read-only zero-byte stubs that squat on XCP's file system namespace. (nyah nyah, you evil bastards!)
What's already out there in terms of hard-coded CD's will not be able to install their crap on your system.
While this "protection" technique is pretty trivial to circumvent (they could circumvent it by checking to see if $sys$filesystem is occupied, then simply installing in $sys$filesystem.001), it can be beefed up by setting very restrictive DACL, and you should also hit the registry keys' DACL as well, see Mark Russinovich's original article for the list - they can't do a damn thing about it with their software they've already released.
These six commands should help the vast majority of semi-technically-inclined kids out there who are worried that they may get infected.
I've used this technique with some success for clueless freinds who are serial spyware victims.
There's probably a lot better ways to protect your home Windows system from this garbage, like disabling Windows Installer service, not running as Administrator, etc. - but then you're jumping through hoops every time you want to install something, and the thing is - people with the wherewithal to do that kind of thing are probably already doing it. The rest of you out there: START DOING IT! And if you don't, well, you can take the minimal precautionary steps I've outlined above. Good luck.
.
It does not matter if it was the Engineer's fault. Can you say Scapegoat? I knew you could. Who plays golf with the CEO? The Engineer? Or the VP of Distribution and IP Protection?
."
"that damn engineer, he said he had the technology to fool the hackers out there so they couldn't detect our DRM. . .
Or, another phrase comes to mind; ". . . you have failed me for the last time. . . "
My company has a programmer named "Hack".
(First name withheld to protect his true identity, but also highly ironic).
And he's a damn good one too.
Bullshit.
This is just a political shakedown.
The next presidential candidate will be approached by Sony with a 7 or 8 figure campaign contribution.
When that candidate wins, the DoJ will shut down these court cases - just like Bush had Ashcroft shut down MS vs DoJ.
Yes, it will cost Sony big bucks. But not in the way that you think.
implying that every Windows user who bought a Mac was turning his or her back on PCs. I don't think that has to be the case at all.
Certainly NOT the case with me.
I use a Mac at home, where I stay virus and malware free, and use my free time for games, web surfing, etc, and I make my living working fixing and making fucked up Windows machines useable. So I wouldn't say that I turned my back on PC's entirely. They fund my Mac addiction.
In the past, while working on a friend's infected laptop, cleaning out malware, I took down the names of some of the installed junk, and in frustration, I reinstalled the OS, and created 0-byte files with the same names as the spyware files, then I set them to read-only, and permissions only to the SYSTEM and a dummy admin user account. For the past year or so, she hasn't had nearly as many episodes of needing me to clear off her system. Part of that may be because of the copy of Spybot Search and Destroy, Norton, and the fact that she now uses Firefox.
But creating an 0-byte Aries.sys stub, making it read-only, may prevent the installation of the real-deal.
Fact is - Bush's approval rating is less than 40%. That's more than a few "jealous" partisan liberals.
Fact is, Bush appointees like Franklin, Safavian, and Libby are under indictment for crimes ranging from fraud, to espionage, to obstruction of justice.
Fact is, Bush's Coalition Provisional Authority "lost" $9+ Billion of our tax dollars through incompetence or fraud, and nobody's even looking into it.
Fact is, The speaker of the House is under investigation for taking money (bribes) from Turkish nationals with ties to terror.
Fact is, the House Majority leader was indicted for campaign finance fraud and conspiracy to commit money laundering.
Fact is, The Senate majority leader is under investigation, and will soon be indicted for insider trading of stocks he held for a company that directly benefitted from legislation he sponsored.
Fact is, if this administration and it's political allies were to dress up as a train-wreck for halloween, it would have been a totally lame costume, because they wouldn't have had to do a damn thing.
Why do I really care if someone in the government knows I was in Las Vegas on some date? The answer: I don't.
I am ashamed to call myself an American with countrymen like yourself. Pick up a book and enlighten yourself for god's sake.
Too bad the world doesn't recognize the sacrifice our sons and daughters have made for them.
Too bad you don't recognize that that sacrifice was for a few good quarters at Halliburton, and a fiscal disaster for our national debt.