Who do you sue if there is a trojan in some OSS? Who pays for the damages? *That* is the point for many managers to decide against OSS in critical parts of their company. And there is as of yet no OSS solution to that.
The quality of slashdot's content is off-topic at best, but usually just misleading nonsense:
the amount of money available in the market is fixed. New innovations make old ones worthless. You have to invent new stuff in order to be competitive -- otherwise the fixed amount of money will be used to buy other ones' products instead of yours. Innovations do not multiply your stuff. They just keep you on top. Damn fucking bullshit. But that's slashdot as usual.
... send congratulations for their first efficient internal database implementation??? Mozilla used text databases to store information which is for Firefox not a big problem, but it is for the Mozilla suite, ie. Thunderbird which uses that dumb db to store usenet article topics completely in memory!
Hell, open-source is a nice idea, but it DEFINITELY lacks QA EVERYWHERE! Even KDE -- the soooo user-friendly desktop -- does not care for proper and reliable operation. How often did I need to go into ~/.kde and fix things manually because the calendar did not work any more etc.etc.etc....
In the end, it is all a matter of work. Much money means much work (usually). So there you go. I just hope that the independence of open-source software leads to a rather prefect end-product (somewhen).
... responsibility! Many commerical applications are time-critical and service contracts must include fines if there is something not working as guaranteed. Do you know any company that gives such guarantees for OSS service contracts? I don't because there isn't any.
If you want to become the next billionaire (after Gates, Jobs etc.), create one such company by getting all Gurus together into one boat: provide guarantees to fix problems instantly by acquiring MySQL, PostgreSQL, Apache, Firefox, OpenOffice, Perl, PHP etc.etc. specialists who do nothing else than to maintain and learn the code bases of these programs. If you can do that, you will be able to push all commercial apps out of the market. But not a single minute before that.
To say it short: running commercial applications does not allow to fix bugs when there is time to do it. It must be done instantly.
... in Linux and firefox is actually no concept at all. They could use process separation though SE Linux but no distro does it for critical desktop apps like ICQ messengers and browsers. And even if they do, the browsers themselves need to be deeply refactored: information flow must be controlled at a simple level and a good solution would probably be to detach and isolate a process depending on the remote website's SSL cert: that way even cross-site scripting attacks would have not been possible and password/cookie information theft could be prevented relatively securily. Security implies a concept. Just programming a scripting language such that it looks secure is not enough. You have to use simple and easy to understand barriers (like domain transitions).
And even that is no guarantee for security. Actually, with today's solution you cannot securely isolate process domains. You can still use bandwidth modulation (RAM, disk etc.) to send information to any other process on the system (it just needs to measure the bandwidth...). I think such problems can only be avoided if one uses a proven concept to build the whole OS.
But who am I to tell how to do such things. Wait a few years, and I'm usually proven to be right.
Hell! Now combine that with an LED beamer and a PDA in the size of a credit card and you've got THE DEFINITE mobile phone that allows you to browse the net, write emails, make video phone calls...
It is actually good to know where all the idiots are. We have to protect them against themselves.
Additionally, because it is a well known fact that politicians are mostly technological idiots, I wonder when we will first be able to dismantle a conspiracy:-))).
What is Gentoo and what makes it different from other distros?
I think it is different because it uses portage.
They should factor it out and separate the portage effort from the Gentoo distro which includes forums, stage tarballs, ISOs, DVDs, LiveCDs and all sorts of derived projects.
For me, portage is not much more than a configuration option translater -- effectively implementing a common and standardized package configuration mechanism for all the packages in the portage tree. I don't see any use in tightly binding it to Gentoo Linux. It could also be used by all other distro manufacturers to build their binary packages.
Hell, I'd love those little number crunchers for digitizing my old analog VHS tapes. A two-pass encoding of somewhat over an hour of analog video takes approx. 6 hours here...
Gimme a 40 inch HDTV with DVI input and I'll have a perfect PC-TV.
So what's the problem? Just put a few buttons on your remote: PC Desktop (ie.KDE or GNOME), TV (tvtime?), saved movies (mplayer with easy movie selection gui?), mp3 player, plus an EPG with recording functionality.
So what? It is already there. Has been there quite a while. The PC can do it all. Why do we always have to have that non-sense talk here?
I have a little and simple rsync-backup script that does basically the same: runs every day, uses locate to search for.rsync-backup files and then stores the directories containing these files. Simple. Elegant. Transparent. Efficient. No need to mess around with system-internals.
There is no simple batch processing system in GIMP like it is in Adobe Photoshop. You can't even record macros but have to use a specific scripting language.
... factorizing the review process and the data creation process? Why do we always set up projects in a singular manner instead of using the internet's capabilities to the max? Let the data be provided by individuals. And sign their data snippets by some official WikiPedia key through the online WikiPedia site. That way, other (review) authorities could enter easily and the user could have the choice among them.
It's all about choice, isn't it? Well, with WikiPedia, it actually isn't. CHANGE THAT! Support secondary projects! Don't be so selfish.
Then we use ebuild flags like "KeanuVoice SchwarzeneggerBodyModel LoveBoatTheme TitanicStory" to modify the whole thing slightly upon installation. It is everything about choice and configurability!
Let's do it the Gentoo way. Who knows better how a movie should look like than myself? *eg*
Oh, they do. That's part of their disclosure and distraction project. Of course, the information contained on these computers is "slightly" modified *g*.
But, hell, this guy is just lying in order to reduce his own punishment...
Slashdot Mirror
I know an extreme SSL security bug delivered with Debian Perl packages (and probably many other distributions) since years.
If you want to know it, pay me. I have told them and no one reacted. Now I'm pissed off and let 'em bleed.
Who do you sue if there is a trojan in some OSS? Who pays for the damages? *That* is the point for many managers to decide against OSS in critical parts of their company. And there is as of yet no OSS solution to that.
Off-Topic????
The quality of slashdot's content is off-topic at best, but usually just misleading nonsense:
the amount of money available in the market is fixed. New innovations make old ones worthless. You have to invent new stuff in order to be competitive -- otherwise the fixed amount of money will be used to buy other ones' products instead of yours. Innovations do not multiply your stuff. They just keep you on top. Damn fucking bullshit. But that's slashdot as usual.
TROLLS!
... send congratulations for their first efficient internal database implementation??? Mozilla used text databases to store information which is for Firefox not a big problem, but it is for the Mozilla suite, ie. Thunderbird which uses that dumb db to store usenet article topics completely in memory!
Uhm, that would be at least 100 liters of cold water a day.
Hell, open-source is a nice idea, but it DEFINITELY lacks QA EVERYWHERE! Even KDE -- the soooo user-friendly desktop -- does not care for proper and reliable operation. How often did I need to go into ~/.kde and fix things manually because the calendar did not work any more etc.etc.etc....
In the end, it is all a matter of work. Much money means much work (usually). So there you go. I just hope that the independence of open-source software leads to a rather prefect end-product (somewhen).
Useless discussion. Almost as useless as /.
... responsibility! Many commerical applications are time-critical and service contracts must include fines if there is something not working as guaranteed. Do you know any company that gives such guarantees for OSS service contracts? I don't because there isn't any.
If you want to become the next billionaire (after Gates, Jobs etc.), create one such company by getting all Gurus together into one boat: provide guarantees to fix problems instantly by acquiring MySQL, PostgreSQL, Apache, Firefox, OpenOffice, Perl, PHP etc.etc. specialists who do nothing else than to maintain and learn the code bases of these programs. If you can do that, you will be able to push all commercial apps out of the market. But not a single minute before that.
To say it short: running commercial applications does not allow to fix bugs when there is time to do it. It must be done instantly.
It is an issue related to the javascript implementation in firefox... it has nothing to do with java.
... in Linux and firefox is actually no concept at all. They could use process separation though SE Linux but no distro does it for critical desktop apps like ICQ messengers and browsers. And even if they do, the browsers themselves need to be deeply refactored: information flow must be controlled at a simple level and a good solution would probably be to detach and isolate a process depending on the remote website's SSL cert: that way even cross-site scripting attacks would have not been possible and password/cookie information theft could be prevented relatively securily. Security implies a concept. Just programming a scripting language such that it looks secure is not enough. You have to use simple and easy to understand barriers (like domain transitions).
And even that is no guarantee for security. Actually, with today's solution you cannot securely isolate process domains. You can still use bandwidth modulation (RAM, disk etc.) to send information to any other process on the system (it just needs to measure the bandwidth...). I think such problems can only be avoided if one uses a proven concept to build the whole OS.
But who am I to tell how to do such things. Wait a few years, and I'm usually proven to be right.
Hell! Now combine that with an LED beamer and a PDA in the size of a credit card and you've got THE DEFINITE mobile phone that allows you to browse the net, write emails, make video phone calls...
It is actually good to know where all the idiots are. We have to protect them against themselves.
:-))).
Additionally, because it is a well known fact that politicians are mostly technological idiots, I wonder when we will first be able to dismantle a conspiracy
What is Gentoo and what makes it different from other distros?
I think it is different because it uses portage.
They should factor it out and separate the portage effort from the Gentoo distro which includes forums, stage tarballs, ISOs, DVDs, LiveCDs and all sorts of derived projects.
For me, portage is not much more than a configuration option translater -- effectively implementing a common and standardized package configuration mechanism for all the packages in the portage tree. I don't see any use in tightly binding it to Gentoo Linux. It could also be used by all other distro manufacturers to build their binary packages.
Hell, I'd love those little number crunchers for digitizing my old analog VHS tapes. A two-pass encoding of somewhat over an hour of analog video takes approx. 6 hours here...
Yeah. Distributing your raw DV capture via bittorrent is really a great effort. *g*
Gimme a 40 inch HDTV with DVI input and I'll have a perfect PC-TV.
So what's the problem? Just put a few buttons on your remote: PC Desktop (ie.KDE or GNOME), TV (tvtime?), saved movies (mplayer with easy movie selection gui?), mp3 player, plus an EPG with recording functionality.
So what? It is already there. Has been there quite a while. The PC can do it all. Why do we always have to have that non-sense talk here?
Kyocera FS-1010. Definitely. Maybe there is a successor in the meantime.
I have a little and simple rsync-backup script that does basically the same: runs every day, uses locate to search for .rsync-backup files and then stores the directories containing these files. Simple. Elegant. Transparent. Efficient. No need to mess around with system-internals.
Hehe, see also some songs from "Three Dead Trolls in a Baggie"... mostly free mp3s... *g*
There is no simple batch processing system in GIMP like it is in Adobe Photoshop. You can't even record macros but have to use a specific scripting language.
... factorizing the review process and the data creation process? Why do we always set up projects in a singular manner instead of using the internet's capabilities to the max? Let the data be provided by individuals. And sign their data snippets by some official WikiPedia key through the online WikiPedia site. That way, other (review) authorities could enter easily and the user could have the choice among them.
It's all about choice, isn't it? Well, with WikiPedia, it actually isn't. CHANGE THAT! Support secondary projects! Don't be so selfish.
Imagine working for years and noone is paying you.
So much about the lighthouse bullshit.
Suckers.
Then we use ebuild flags like "KeanuVoice SchwarzeneggerBodyModel LoveBoatTheme TitanicStory" to modify the whole thing slightly upon installation. It is everything about choice and configurability!
Let's do it the Gentoo way. Who knows better how a movie should look like than myself? *eg*
Oh, they do. That's part of their disclosure and distraction project. Of course, the information contained on these computers is "slightly" modified *g*.
But, hell, this guy is just lying in order to reduce his own punishment...