Slashdot Mirror


User: rifter

rifter's activity in the archive.

Stories
0
Comments
2,375
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 2,375

  1. Re:Not patching this month...... on New IE Bug Hides Real Site Address · · Score: 1

    the 0.7 milestone, or a nightly? I generally use nightly builds, and occasionaly there is something broken in them, like a few weeks back my banking site would go back to the login page after I logged in, updated to that day's nightly and all was well. I'm also using the Windows version, so I suppose there could be issues with the Linux one that I don't see. I don't have any issues with Slashdot, the only site that gives me issues consistently is Gamespot.

    I have, and this is for every version of Mozilla I have ever used, from the 0.9x days onwards, be they nightlies, milestones, or whatever. Ditto Firebird. Slashdot is best viewed using Internet Explorer on Microsoft Windows, period. It's always been that way, too, because most slashdotters view it that way.

  2. Re:This bodes ill on New IE Bug Hides Real Site Address · · Score: 5, Insightful

    for paypal where there are so many redirect scams.

    You're telling me, buddy. Unfortunately Microsoft is not aware that this occurs at all, ever. This is a good example of how unaware they are in general. Meanwhile...

    Microsoft did not set a timetable for its investigation, but said it may eventually release a patch to address the problem. Meanwhile, the company recommended that people follow basic security procedures, including the use of firewalls, software updates and antivirus software.

    So I should use firewalls and antivirus software. Riiiight. Doesn't address this vulnerability in the slightest. How about I don't use MS software for business-critical financial transactions. Especially since they "may" release a patch. Someday. Like they did for the 1001 other vulnerabilities they did not wnat reported.

    Microsoft faulted security mavens for publicizing the flaw, implying that they hadn't given Microsoft sufficient time to craft a patch.

    "Microsoft is concerned that this new report of a vulnerability in Internet Explorer was not disclosed responsibly, potentially putting computer users at risk," the statement reads. "We believe the commonly accepted practice of reporting vulnerabilities directly to a vendor serves everyone's best interests, by helping to ensure that customers receive comprehensive, high-quality patches for security vulnerabilities with no exposure to malicious attackers while the patch is being developed."

    So customers should not be warned that they might be fooled into giving their money to thieves/terrorists because it might embarrass Microsoft. That is irresponsible in itself. Besides Microsoft does not fix vulnerabilities unless they are widely publicized enough that CNN is reporting them and CEOs understand them. Again the only responsible thing to do is to advocate Mozilla for financial transactions.

  3. Re:How did on U.S. Agencies Earn "D" For Computer Security · · Score: 1

    Actually, it's not.

    It's to do with the URL, so if you had to pronounce the slashdot URL, it would be:

    "http colon slash slash slashdot dot org"

    Thus the big funny.

    But the urls use / as well. What are you talking about?

  4. Re:Tinfoil hat or not? on China Releases Own WLAN Security Standard · · Score: 5, Interesting

    "While WLAN equipment sold in China is required to comply with this standard from Dec. 1, a transition period has been granted that extends the compliance deadline for some WLAN products until June 1, 2004."

    This sounds terribly rushed. How long have they been working on GB15629.11-2003 for (the ..-2003 may be a hint)? How well has it been scrutinized by security people?

    These questions lead me to believe that there are two possibilities here:

    A: This is a system that the Chinese government built weaknesses into to spy on its people.

    B: The Chinese government is rushing to get beat the IEEE people to make this an early standard which will make worldwide adoption easier. Now re-read A and drop the "on its people". Tell me if you feel better.

    That all said, you don't need to wait for these committees to finish fighting to harden your wireless LAN. At work we use IPSec over our 802.11[bg] stuff which is all VLAN'd and routed to an outside interface of our Cisco PIX.

    Personally, I see this as the beginning of the fulfillment of the warnings security experts have raised over the past 10 years which were ignored despite the thirty foot tall letters of fire that said "ignore this at your peril." US Companies and Governments have taken a consistently anti-security stance, fighting the addition and development of more secure products, fighting security research, fighting the exposure of insecure products, etc etc.

    Work on cryptography and encryption has to be done outside the US because of shortsighted laws and the aforementioned atmosphere. The crappiness of US wireless technology has been pointed out again and again only to be met with "STFU you terrorist! Do you want to destabilize our economy even more?" Now China is coming out with a better standard and US companies are scared to death people will switch since they refused to develop a decent one.

    I am not saying the Chinese method will be the best, either. On the contrary I think that it will be the beginning of a trend of better, more secure products being made in countries other than the US where innovation can actually occur without running afoul of our brain-dead IP and antisecurity laws. China not being a hotbed of innovation normally only suggests that we have much much worse to fear from countries which have a more individualistic culture.

  5. Re:So? on Microsoft Retires Windows 98 · · Score: 1

    Office XP Developer Edition

    Sorry if I missed the joke.

    The joke is that Microsoft has nothing newer. Next they'll be retiring Longhorn. At least they will be telling the truth, then.. no support out of the box! :)

  6. Re:So? on Microsoft Retires Windows 98 · · Score: 1

    Windows 98? But they are on XP now...
    So I guess it's no big deal. How does this harm Microsoft? Win98 is (was) a nice and stable gaming platform, but XP is very stable for gaming too. This counts as a win on the record, but it's still too little too late, imho. Sun should be awarded more rights over *current* and *future* Microsoft products, as a penalty. This could get interesting!

    Erm, they're retiring Office XP as well! That's a little over the top, IMHO. :P

  7. Re:Get Real on Future of 2.4 and 2.6 Kernels · · Score: 1

    "Because Logitech is evil and stopped making the only decent mouse EVER"

    Did you know that your link doesn't even point to a mouse? Oh well. Logitech make a bunch of excellent mice. Their infrared mice are incredibly accurate.

    It points to a Logitech TrackMan, which is a trackball, which to some is not a mouse, but it is to me. I guess if you want to make trackballs not mice, then I would have to say I hate mice altogether. They suck. I always run out of space and have to wrestle with the stupid cord. Cordless mice have been unreliable. If the Trackman is not a mouse because it is a trackball, then the erasermouse (TrackPoint) is not either, and is therefore a joystick.

    So to fit your criteria, the only decent pointing device ever, the TrackMan. Logitech stopped making them. Yes they make the best pointing products.

  8. Re:Moot? on Cringley on E-voting · · Score: 1

    Here in Oz, you front up to the Voting Place, the electoral people ask you if you have voted before on this day, you say "no", they look you up in their copy of the electoral roll, give you a voting slip (ballot paper)which has been initialled on the back by another electoral official, then they rule a line through your name after confirming your address and date of birth. You then take the ballot paper to a booth and armed with a pencil do the democratic thing! you then fold up the ballot paper and post it into the sealed ballot box, watched by another electoral official. All open and scrutinised by everyone there. A manual system can and does work well.

    And then you go to the next polling place, and they say "have you voted before?" and you say "no" and they mark your name off and watch you vote....

    Riiiight....

  9. Re:Moot? on Cringley on E-voting · · Score: 1

    Having attended several election counts in the UK, I have to ask why you guys don't you do what we do - have the electorate mark their ballot papers as appropriate, and then count the votes BY HAND a a count session to which *all* of the candidates are invited ? This way all of the candidates can clearly observe the ballots being counted, and can quickly flag the official(s) in charge of the election if there's something fishy afoot. There's no room for any fiddling of the vote to take place, and thus no room for suspicion or paranoia. It's sane, understandable by the non-IT literate (in other words, the majority of the public) and there are NEVER any disputes about votes being counted wrongly. The views of all of the candidates are sought on the counting of erroneously marked or spoilt ballots.

    Because we tried that already and it failed. Did you sleep through 2000?

  10. Re:*voter-verified* audit trail... on Cringley on E-voting · · Score: 1

    After all, do you currently check your ATM printouts? I do not.

    I do, and I keep them as well in case there is an error later (and to provide records). You don't care of the atm deducted $100 from your account and gave you $20, but I do. Therefore I check. Conversely, if you care to check your slip after voting you can confirm the correct vote registered, else vote again after registering a spoilt ballot. But you will probably not check. That's okay. I will.

    I think that the source shoudl be open to this software since our tax dollars are paying for it and we are using it. (This neatly leaves an out for the CIA software or the stuff that runs our nuclear missiles since we do not use it we don't need to see it. THough people who do use it shoudl be able to see it.) You will not read the source code. BUt I might, and others certainly will to make sure that it does not contain any nastygrams. I think to certify the software it shoudl be compiled from the publicly available source as well to leave out that hole.

  11. Re:Three Cent Manifesto on Outsourcing Winners and Losers · · Score: 1

    Look at food, housing, gasoline, taxes that Europeans pay compared with what Americans pay and you'll get the idea pretty quickly that protectionism is not a solution.

    You say that, the talking heads all say that, but none of you seem to have any idea what *is* the solution. It is one thing to say that what is proposed is a bad idea. It is quite another to come up with something better.

    2. Workers should receive equity stakes in companies as well as wages. Intended for retirement, these stakes could only be sold early at a substantial loss.

    It's called a 401k, or an employee stock purchase plan, or stock options. It is not new, it has been done before, and is being done now. Actually to a degree it has caused more troubles when the employee in question is the CEO. If the CEO can make the stock price rise artificially by laying people off (or by SCO/Rambus methods) it will not help the employees (particularly the ones who are laid off therefore losing their stock options) but it will help him/her, therefore encouraging such behaviour which is bad for the company in the long term.

    4. Remove the farm subsidies in the U.S., Europe, Japan that not only cost taxpayers and consumers, but also prevent 3rd world nations from competing on a level playing field and providing an opportunity for them to raise their standard of living out of the subbasement.

    Those farm subsidies are the reason food is so cheap in the US. A cheap, plentiful supply of food is a sure way to a secure nation. I also could care less about the third world farmers not being able to compete. That should provide them an incentive to industrialize and quit trying to be a medieval agrarian society in the 21st century.

  12. Re:management incomprehension on Outsourcing Winners and Losers · · Score: 1

    "When jobs requiring college degrees get outsourced it means a return to the middle ages, with a rich, talentless aristocracy, and a sea of poverty."

    Except, of course, for those people in poorer countries who are prepared to move -up- out of their patch of the middle ages which they have been in for a loooong time.

    Did you really think that a select group of countries could keep all the good jobs locked up for themselves forever?

    Why do they need to take our jobs, though? Can't they have their own? And are you so sure this will help them? I am sorry, but I think I missed that part in American History class where they explained that the USA built itself into an economic powerhouse when the European corporations, in search of cheap labour, outsourced here. Oh, maybe that is because that is not what happened.

    Unless the third world nations actually come up with their own ideas, companies, and products to compete with ours and sell to us they will just be setting themselves up to lose to the next lowest bidder. This is nothing more than a continuation of mercantilism which will indeed keep these countries "developing" forever and will never benefit the middle class in the outsourcing countries.

  13. Re:Those that do on Outsourcing Winners and Losers · · Score: 1

    When I read that but about coding being a low-level unskilled job, I thought "Why the hell can't they outsource the pundits?" :) :P

  14. Re:Linux linkiing analogy on Linux: the GPL and Binary Modules · · Score: 2, Informative

    But for some reason Linus believes that anything that uses interface to kernel is derived work then and should be GPLed...,/i>

    No he doesn't. RTFA. He specifically used NVidia did not have to GPL the drivers. I don't understand at all where this confusion comes from. It is really pretty simple. Derived works are GPL. Works which are not derived are not GPL. So if you have to include code from the kernel your work shoudl be GPL. If not, then no. This is why the Nvidia wrapper is GPL and the rest of the driver is not.

  15. Re:Get Real on Future of 2.4 and 2.6 Kernels · · Score: 1

    /dev/input/mice works in the 2.6 kernels.

    It's a very nice node. I never even got /dev/input/mouseX working in 2.4, though.

    $ ls /dev/input
    mice mouse0 mouse1

    And what happens when you have two mice plugged in at once? I leave a ps2 mouse plugged in in case I forget my usb trackman at work... IN my current environment this works just fine (just relink /dev/mouse and voila!).

  16. Re:WRONG on Future of 2.4 and 2.6 Kernels · · Score: 1

    In any case, what he probably meant was "reality == (C|Net)". "==" has higher precedence than "|".

    Well, I was side-stepping the whole | issue. I mean if you count | as the special character most languages count it as then you can't have it as part of a variable name in the first place, now can you?

  17. Re:Get Real on Future of 2.4 and 2.6 Kernels · · Score: 1

    You have to enable the mouse driver under "input core". I enable everything under input core as modules. If you want to use a USB mouse you'll need to enable the HID driver under the USB menu. In the last few kernels you'll need to check the "HID input layer" checkbox, which isn't on by default. Hope this helps.

    I have all that on. I thought that was how I ended up with /dev/input/mouse0. Now as I said I did not do it as modules which I should have done, but I have been bitten by "what should be a module and what should not" before. Just because xconfig says you can compile something as a module does not mean you really can...

    Anyway I hadn't had a chance/time to mess with this so I left it as it was. I will try your suggestions, however.

  18. Re:Get Real on Future of 2.4 and 2.6 Kernels · · Score: 1

    Conversely, if you want to call software 'stable,' then you shouldn't put experimental features in it.

    --
    Sick of gentoo zealots throwing plugs in completely unrelated topics? Me too!

    But Gentoo is both stable and experiemental! :) Sorry you were asking for it with that sig.. :P

  19. Re:Get Real on Future of 2.4 and 2.6 Kernels · · Score: 1

    If you e-mail me I think I have one sat unused in a drawer somewhere... it's PS/2, but my guess is you can cope with that.

    Thanks, I will email you to work out a deal on it. I had not been able to find one even on ebay or anywhere else on the web or any computer stores (even ones that sell old eq). The interface is not so important to me as the actual mouse part. :)

  20. Re:Get Real on Future of 2.4 and 2.6 Kernels · · Score: 1

    "I mean which is the One True Mouse?"

    /dev/input/mice - All events from all plugged in mice (hotplug supported ones, anyway) get sent through this device.

    Not on my system, they don't.

    root@perita:~# ls -ld /dev/input/mice

    ls: /dev/input/mice: No such file or directory

    What would I have to do to get that to happen? I am using 2.4.22 atm and IIRC have devfs as well.

  21. Re:WRONG on Future of 2.4 and 2.6 Kernels · · Score: 1

    **turns beet red and tries to change the subject**

    But he should have said "reality == C|Net" then he wouldn't have made the mistake, or it would give a compilation error.

    Wrong again. Depending on the context the statement may have produced a runtime logic error, but it would compile just fine. Otherwise you could never do assignments. Perheps you shoudl stop digging now? :)

  22. Re:Get Real on Future of 2.4 and 2.6 Kernels · · Score: 1

    The virtual /dev file system(EXPERIMENTAL) is *really* nice. There are some problems though, no /dev/mouse. I know the solution though, just create some kind of link to the real device and save it with dev*(whatever its name is). It will be restored at boot, easy as caek.

    I always thought the /dev/mouse was left out on purpose so it could be linked to the right mouse. I mean which is the One True Mouse? /dev/ttyS1? /dev/psaux? /dev/input/mouse0?

    I have found that when I hotswap my usb mouse Linux switches which device it is even if I plug it back into the same usb port. If /dev/mouse were not a link, I would be fucked then. Not proper fucked, but you get the idea. I am told that this is because I did not compile the usb drivers as a module, and if I loaded/unloaded the module when I hotswapped the mouse the problem would go away, but I have not tried that.

    Why am I hotswapping my usb mouse? Because Logitech is evil and stopped making the only decent mouse EVER everything else just sucks. Well, except the Thinkpad erasermouse, but it sucks as well because of the automagical reconfiguration that really just means your mouse is possessed.

    I cannot find anywhere to get trackman mice. No one will ever sell the ones they have because they are so awesome and they know they will never again be able to buy one because logitech went retarded. The new trackballs are ridiculously tiny and just no good. They should have stuck with the original design.

    Anyway, I hotswap my mouse because I have to take my mouse to work to get work done and then back home. Regular mice are a serious dent in my productivity :(.

  23. Re:Probably not intentional... on AT&T Wireless Fumbles Number Portability · · Score: 1

    "Erm, there is nothing illogical about it, and this is not new, not even for AT&T. "

    Yeah there is. They're having trouble getting people to switch to their service because of this. If they're doing this on purpose, they're waving a don't go through us or you'll have a hassle! flag for all to see.

    No, people are having trouble switching FROM their service because of this. My theory is that the people having trouble switching TO their system are having trouble precisely because they are having trouble swithcing FROM someone else who also does not want to let go. I could be wrong about that, but it is perfectly logical, and makes sense given the fact AT&T was far from alone in opposing this bill.

  24. Re:The EFF and FSF have no interest in removing IP on McBride's New Open Letter on Copyrights · · Score: 1

    Fine, but the FSF -- and especially EFF -- message is one that says that copying copyrighted music is cool.

    And the FSF botched it when they failed to clearly state that the unauthorized release of WASTE could not be covered by the GPL.

    I could provide countless examples, but do I really have to?

    Sure the FSF and EFF do good things, but their copyright politics are quite screwy. Copyright as applied to GPL'd code should be respected, copyright as applied to music shouldn't be.

    So I countered your FUD with facts and you just repeat it again? Were you paying attention?

    The FSF and the EFF respect copyright and otehr IP law absolutely. The FSF choice is to avoid technologies that are encumbered by IP concerns. In other words, they FOLLOW THE LICENSE. RMS is obeying the MS EULA and the RIAA dictat to the letter, by not using their crap in the first place.

    In the case of the EFF, they have advocated Fair Use rights such as copying and they have opposed abuses of the DMCA. That does not mean that they advocate distributing music illegally, which they never ever have done.

  25. Re: the future? on Microsoft to Charge for FAT File System · · Score: 1

    If you look at what Microsoft is offering here they are at least offering a reasonable value in return in the form of a pretty decent compatibility testing regime. You can easily spend a couple of hundred grand on that type of testing.

    Of course it does suck for OSS, but write your own device drivers and you can do whatever you like. You could even have an encrypted file store on a removable medium - somthing Microsoft seem unable to support. For some reason I can't format my compact flash cards with NTFS and enable the crypto.

    But since it is a patent, we cannot write our own FAT drivers and have done. IN fact that is what OSS did, and that is why they will be screwed. Unless you are saying write a new FS driver. BUt that is done as well, and they are better than FAT. Except Joe Sixpack does not understand that and will wonder why he can't stick your flashcard into his camera and have it work. He will wonder why he has to install drivers for Windows to read your stick when the other guys have a stick that does not need drivers. This will result in the stick having to use FAT and paying teh royalty and then therefore NOT working with Linux since LInux cannot pay the royalty and be legal.