You know you really are full of shite. Stop talking about Java and Android as if you're some kind of expert; you're far away from such an esteemed title.
Scathing insult sent from my Android-based Samsung Galaxy Tab.
Am I the only one who was disappointed upon visiting the linked "story" only to find a desktop that doesn't look anything like Windows 7? Windows 7 doesn't (by default) use dark UI elements, there's no transparency for the task/menu bar, I could go on... I use Windows way more that I'd like, alas, and to me that just looks like Gnome with an (admittedly quite nice) gtk-engine theme.
Everyone? I agree (in spirit), but if everyone gets a license to use such patents, then companies like, for example, Apple or Microsoft or Oracle would get (pooled?) open source patents for free whilst still being able to use their own patent portfolios to do harm. Which is like the worst of both worlds... or something.
I was quite surprised actually, the GPS on my Galaxy S seems to be pretty accurate (to about 5-10m). Seems like myself and a few others were the lucky ones judging by all the reports I've seen of the GPS being duff. Makes me wonder if it'll get worse if I update to the latest firmware...
For the love of all things pure, please learn to use more punctuation! You make a somewhat valid, or rather interesting point, but 90+ words without a single comma is really taking the piss...
Probably because this particular security researcher wants to make a name for themselves.;)
Peronally I prefer full-disclosure (or worst case, so-called "responsible" disclosure) and don't see the value in these kind of pre-announcements, especially when the attack vector is known as is the case here. All it does is send an even clearer signal to enterprising crackers that they should be looking at popular applications to see if they are vulnerable to this exploit, which doesn't exactly help security.
Apparently the patch that Andrea Arcangeli submitted back in 2004 was deemed too ugly for inclusion. I've not been able to find an authoritative source on this though, so by all means take this with heaps of salt.
If I could run Linux full time, I'd do so without hesitation. Alas, the state of audio in Linux means I have to spend way more time than I'd like in Windows... stupidity really doesn't come into it.
Perhaps this guy is giving the companies that develop these applications adequate time to patch them, before telling the world which ones are vulnerable? It's not like it'd be the first time where something like this has happened.
Yes, OS X is more secure. Oh, and Apple doesn't have a fucking atrocious security track record. And that PDF-based 'root my iPhone/iPad in a single click' didn't exist either...
I'd be careful using words like 'always' when talking about cable speeds in the UK. Take a look at Virgin Media's customer support forums some time, you'll find an abundance of people that aren't getting anywhere near the advertised speeds...
Only an ignorant (or should that be arrogant and stupid?) dev chooses a language that is strongly typed and requires compilation when a less strict scripting language is the right tool for the job.
They bought the company that invented the Android platform back in '05, sure. Are you really saying that in the last five years they've done absolutely nothing innovative with the platform though? I'm not saying they have (my knowledge of Android isn't as vast as my knowledge of the underlying tech, like the Linux kernel), but just because they bought the start-up that created the platform initially, doesn't mean they shouldn't get credit for all the work they've done since.
Sounds shitty. Everyone has operator horror stories, though. Myself, I've never had any problems with Vodafone in the five or so years I've been using them here in the UK. My old phones (all Sony Ericsson handsets) were branded, but not to buggery like they tried with the Desire. And on the rare occasions I had to deal with their customer service department, they were always very helpful and eager to resolve my (minor) issues as quickly as possible. I guess they saw me as a valuable customer... pits operators don't treat all of their customers this way.
O2, Orange, T-Mobile and Virgin on the other hand have all shafted me, cost me hundreds of pounds, wasted countless days (if not weeks!) of my time, leaving me to wish that one day they might die in a fire.;)
You know you really are full of shite. Stop talking about Java and Android as if you're some kind of expert; you're far away from such an esteemed title. Scathing insult sent from my Android-based Samsung Galaxy Tab.
Err, forget what I said. I just refreshed the page to find a whole bunch of images that do actually resembly Windows.The shame... :(
Am I the only one who was disappointed upon visiting the linked "story" only to find a desktop that doesn't look anything like Windows 7? Windows 7 doesn't (by default) use dark UI elements, there's no transparency for the task/menu bar, I could go on... I use Windows way more that I'd like, alas, and to me that just looks like Gnome with an (admittedly quite nice) gtk-engine theme.
Slow news day?
Very informative post. Better luck next time, eh.
Everyone? I agree (in spirit), but if everyone gets a license to use such patents, then companies like, for example, Apple or Microsoft or Oracle would get (pooled?) open source patents for free whilst still being able to use their own patent portfolios to do harm. Which is like the worst of both worlds... or something.
If there were more posts like this on Slashdot, I'd come here not just when I'm bored senseless and looking to kill time before bed. ;)
Care to share whatever you've been smoking, dude? Sounds like some good shit...
In Soviet Russia... that tired joke is fucking boring.
I was quite surprised actually, the GPS on my Galaxy S seems to be pretty accurate (to about 5-10m). Seems like myself and a few others were the lucky ones judging by all the reports I've seen of the GPS being duff. Makes me wonder if it'll get worse if I update to the latest firmware...
Since when is does this exploit involve overflowing buffers?
For the love of all things pure, please learn to use more punctuation! You make a somewhat valid, or rather interesting point, but 90+ words without a single comma is really taking the piss...
Probably because this particular security researcher wants to make a name for themselves. ;)
Peronally I prefer full-disclosure (or worst case, so-called "responsible" disclosure) and don't see the value in these kind of pre-announcements, especially when the attack vector is known as is the case here. All it does is send an even clearer signal to enterprising crackers that they should be looking at popular applications to see if they are vulnerable to this exploit, which doesn't exactly help security.
Apparently the patch that Andrea Arcangeli submitted back in 2004 was deemed too ugly for inclusion. I've not been able to find an authoritative source on this though, so by all means take this with heaps of salt.
No, just that this particular bug has been patched in SUSE for six years, while mainline has only just gotten the fix.
Only on /. do insightful comments get modded troll, and spam modded funny...
Generalise much?
If I could run Linux full time, I'd do so without hesitation. Alas, the state of audio in Linux means I have to spend way more time than I'd like in Windows... stupidity really doesn't come into it.
Perhaps this guy is giving the companies that develop these applications adequate time to patch them, before telling the world which ones are vulnerable? It's not like it'd be the first time where something like this has happened.
What should concern you is that this bug was patched by SUSE in 2004, but it took 6 years for that fix to make it into mainline...
I think your sarcasm detector needs replacing...
Yes, OS X is more secure. Oh, and Apple doesn't have a fucking atrocious security track record. And that PDF-based 'root my iPhone/iPad in a single click' didn't exist either...
Ha.
I'd be careful using words like 'always' when talking about cable speeds in the UK. Take a look at Virgin Media's customer support forums some time, you'll find an abundance of people that aren't getting anywhere near the advertised speeds...
Only an ignorant (or should that be arrogant and stupid?) dev chooses a language that is strongly typed and requires compilation when a less strict scripting language is the right tool for the job.
They bought the company that invented the Android platform back in '05, sure. Are you really saying that in the last five years they've done absolutely nothing innovative with the platform though? I'm not saying they have (my knowledge of Android isn't as vast as my knowledge of the underlying tech, like the Linux kernel), but just because they bought the start-up that created the platform initially, doesn't mean they shouldn't get credit for all the work they've done since.
Sounds shitty. Everyone has operator horror stories, though. Myself, I've never had any problems with Vodafone in the five or so years I've been using them here in the UK. My old phones (all Sony Ericsson handsets) were branded, but not to buggery like they tried with the Desire. And on the rare occasions I had to deal with their customer service department, they were always very helpful and eager to resolve my (minor) issues as quickly as possible. I guess they saw me as a valuable customer... pits operators don't treat all of their customers this way.
O2, Orange, T-Mobile and Virgin on the other hand have all shafted me, cost me hundreds of pounds, wasted countless days (if not weeks!) of my time, leaving me to wish that one day they might die in a fire. ;)