Yes, nobody is perfect, I'm sure Linux and MacOS have exploits that can do the same things
Wow, posting that on SlashDot? Are you ever asking to get flamed!;)
Seriously, though, I've seen any number of people claim that over the last few days, usually mentioning Linux specifically. Now Linux does have its share of bugs, and there have been worm-capable bugs in common Linux software before (ssh and RedHat's lpd in the last two years), but most Linux vulnerabilities involve privelidge (sp?) escalation (e.g. getting root on a box you already have access to). I cannot think of a single recent exploit for Linux which allows a user to execute arbitrary code on the system without having shell access (much less one in a service installed by default in most distros). This is what a worm requires, of course. At the bare minimum, a worm must be able to run the command to attack other systems without needing any special access to those systems (e.g. knowing all their passwords in advance).
So frankly, no, I don't think that Linux is just as vulnerable as Windows, despite the many claims to the contrary. I have argued that the people who make these claims don't know the difference between different types of vulnerabilities -- they equate the MS RPC vulnerability with, say, the postfix DoS vulnerability, even though the two don't compare in terms of severity or the number of vulnerable systems (not even in terms of the percentage of users who might be vulnerable).
With that in mind, can anyone give me an actual example of a Linux vulnerability from, say, the past year, which would allow the execution of arbitrary code on a Linux box simply by sending properly formed data to that system? If there is currently such a vulnerability in Linux, I should stop arguing against its existence!:) Vulnerabilities in software which is not too common but not extremely obscure either should be included, seeing as how MS recently suffered from a worm which only affected a system running Microsoft's SQL service (not particularly commonly used).
Actually, I can't think of a single Chinese actor who has been doing better in the US than in HK.
You might make a case for Jackie Chan. He's had some massive hits in the US (the "Rush Hour" movies), makes a lot of money with relatively little effort by releasing redubbed HK films, and can tap into other revenue sources (How much do you think he got paid for that commercial with Michael Jordan?) All that _in addition_ to continuing to make movies in Hong Kong. He's probably not any worse off for focusing on the US.
Also, didn't Lucy Liu make a couple of movies in HK early in her career?
Nope. Sorry, doesn't work that way. As long as there are people out there who can think independently, there will be some who want to kill you, take your home, rape your children, whatever. As long as human beings have free will, there will be people who wish you harm.
This has nothing to do with what you do or do not do. You can make more people dislike you through your choices, but you can never make no people dislike you.
There may always be a few people who dislike you, but there will be a lot more if you go around being a jerk. Just because some people will always dislike you doesn't mean that you shouldn't try to decrease the number of people who dislike you. You can make people dislike you through your actions, but you can also make people like you through your actions. Let's not forget that.
You can never be loved by everyone. Sooner or later, somebody's going to come along who hates you, hates your way of life, and wants to kill you.
Societies that fail to defend themselves from these kind of people inevitably fall to them... or wake up and start hammering their plowshares into swords.
Don't take too much of an extreme position. Total disarmament is a bad idea, but total emphasis on military force while ignoring the value of diplomacy and PR is also a bad idea. There is a kernel of logic in the grandparent post.
The best way to guarantee a war is to be unprepared for one. And the best way to prevent a war is to be absolutely, undoubtedly ready to wage one if called upon to do so.
The best way to prevent a war is not to start one. Remember, even the weakest nation can choose to pick a fight or not.
Regarding military strength, clearly being the strongest can prevent others from attacking you directly. However, it seems to me that being strong leads to a willingness to use that strength, or even a sense or responsibility that one must use that strength. A sense of "with great power comes great responsibility", perhaps? Yet in the absence of any clear responsibility, what are the strong to do?
I suspect that this is why the strongest military out there (the U.S.) keeps getting involved in so many little wars. They keep feeling as though they _have to_ get directly involved in other nations' problems (e.g. who's in charge in Iraq/Afghanistan/Grenada/Panama/etc.) This side-effect may have unfortunate implications. Wars cause damage to a nation's property and its pride, and cause loved ones to die (remember, enemy soldiers have families too). This leads to a lot of resentment, and a desire to harm the enemy. And while a strong enemy cannot be attacked directly, there are indirect (e.g. terrorist) means of attack...
I don't know about you, but if I couldn't have the average popular song for free, I certainly would not pay for it. I'd spend my hard earned cash on more important things, like junk food.
Oh, I don't disagree with that. I was just pointing out that the people who in my experience download songs from Kazaa (mostly teenagers) couldn't possibly pay for all the songs they downloaded, especially if you assume that they're making 10 copies for each one song they download. Between the sheer number of downloads and the lack of funds, it just ain't happening. Of course, this partially undercuts the argument that the RIAA/artists/whoever is losing money from file-swapping. You can't "lose sales" from people who have no money.:)
Yeah right. "Community support", that's where it's at. Have you been on any support channels?
s20451: I'm having trouble getting my ATI card to work under Linux. Can anyone help? HellDog69: LOLOL u noob RTFM 31337h4x0r: u r gay
I hate to tell you this, but all of IRC is like that. I'm pretty sure most IRC clients these days come with a "u r gay" button. It's right next to the "A/S/L" button.
Anyway, here's a suggestion for you: try a newsgroup. There are some grownups on the newsgroups, and most of the conversations use English and involve complete sentences. That's a big step up from IRC.:)
"A 2002 study funded by the National Institute of Standards and Technology estimated software errors cost the U.S. economy about $59.5 billion a year."
And politicians are worried about entertainment piracy hurting the economy. Maybe there are more important things to fix than catering to the entertainment industry...
Yes, but you must understand that entertainment piracy costs the U.S. economy more. In fact, according to the RIAA's numbers, music piracy alone costs the U.S. economy over _six quintillion_ dollars a year. If they could only convince all those 14-year-old kids to spend millions of dollars each on CDs instead of just downloading the same songs via Kazaa, the U.S. would not only be out of debt, but the average American's salary would increase to tens of thousands of dollars a day (just like the average music industry executive).
Now do you see why entertainment piracy is more important?
..but if you are really interested in moving around throughout this land of ours with being tracked by big brother's watchful eye in the sky, then you can LEAVE YOUR NOKIA AT HOME.
Do I still have to pay $50/month for that honor?
Seriously, what's the point of having a cellphone if you aren't going to take it with you? Not only is it useless for making outgoing calls, but even if you only leave it behind sometimes, regular callers start to learn that you can't always be reached by cell, so they don't call as much. You might as well get a regular phone and an answering machine.
Not buying a cell phone in the first place seems like a better solution.
Gravity is the LACK of OPPOSING force, caused by a local absorption of this so-called "dark energy" by a local mass. In effect, gravity is a "shadow" produced by the blocking of the dark energy's repulsion from one direction. The net effect of which is to accelerate one body towards another, as each "feels" the "shadow" - the reduced opposition - from the direction of the other.
Okaaaay... then why is it that the strength of the gravitational attraction between objects depends entirely on their mass, rather than on their shape or size?
The sun and moon block the same amount of the Earth's sky. I'm sure we're all familiar with that fact that during a solar elipse, the moon almost exactly blocks out the sun. If gravity is just caused by mass blocking dark energy from one direction, then why does the Sun attract the Earth far more strongly than the Moon does? They should both block just as much dark energy.
Why was this modded funny rather than interesting? It's a good point. It's hard to type up something that's actually coherent (much less smart) so quickly. I guess that none of the "First Post!" whores are subscribers.
I notice how they list the trademarks at the bottom of the press release, except for Linux.
I believe that "Linux" is already a registered trademark of Linus Torvalds. Besides, SCO isn't claiming to _own_ Linux in general (except perhaps in the online FPS gaming sense), just some code in the Linux kernel.
that's going to *shred* my render times! thank you! a THREE percent improvement?
Taking a hypothetical scenario literally is usually a bad idea. What if that 3.2 Ghz core could get to 3.4Ghz? How about 3.5? Why not 4.0?:) Hey, that's a 25% improvement! Oh WOW, what a MAJOR ADVANCEMENT in CPU technology!!!
See, I can adjust my scenario as needed to prove my point, because it's all hypothetical. I only meant this scenario as a description of how thermal paste could be beneficial. My words were not to be taken as literal fact.:)
On the other hand, try pretending for a moment that you're a hard-core gamer looking for a CPU to play Doom III or Half-Life II with... Now does 3% more speed for free look pretty good?
Of course, better thermal paste wouldn't just benefit the fastest CPUs. A better thermal paste could result in better bin splits. More CPUs would be stable at higher speeds. Can you say "Faster/Cheaper CPUs for everybody"?
A year ago the TV people were crying that Tivos and other DVR devices would spell certain doom for free/commercial TV. Then cable companies started talking seriously about pushing out there own DVR units.
Frankly, I'm not surprised. Right now it is the cable companies who get money from you every month now matter how many/few commercials you see, and it's a cable companies who are renting (and making money off) this Explorer 8000 unit. Sounds like the cable companies know how to make a profit. Here's the simple formula:
1) The more channels/services you get from them, the more money they make.
2) The more restrictions which networks and advertisers place upon the consumer, the less valuable the cable companies' product appears, which leads to customers who aren't willing to pay as much for cable and who start looking into satellite/broadband TV.
3) Thus, the cable companies supply services which other industries may not want them to supply (PVRs, VoIP) while playing just nicely enough with those other companies and/or the government to avoid real problems (lawsuits? regulation?)
Under FCC guidelines, a Homeowner's Association or a landlord cannot prevent a homeowner from installing a satellite dish less than one meter in diameter on any property where the owner has both direct or indirect ownership and exclusive control.
Since when did the FCC have the right to regulate property? These aren't FCC rules, they're part of the Telecommunications Act of 1996, passed by Congress.
Even then, if this involves a permanent modification to your apartment, you probably should still get your landlord's permission before installing anything. If you make any permenant changes to the apartment, you may end up being responsible for the results (e.g. if you damage a railing by attaching a satellite dish poorly).
* stop knocking the thermal pads. retail CPUs use these because joe sixpack can't f*vck it up and claim on their warranty. if you don't like it, scrape it off and stick a blob of arctic silver or similar
* bear in mind AMDs warranty only applies if you use approved thermal solutions
One of the suggestions made by this article is that this carbon-black paste may eventually become the standard. If it works at all, it'll probably become an AMD approved thermal solution. Who knows what'll happen in the long run? Incidentally, the same applies to the other kinds of thermal paste mentioned in the article (a diamond-based type and a carbon-nanotube type), should one of them become the standard.
* who runs within 2 degrees of max temp for their CPU? some crazy overclockers, but it's not exactly reliable practice, is it? if it was 10 degrees, maybe but it's not going to make that much difference
Backing up a bit, if a superior thermal paste does become standard, then the argument is that CPU makers might be willing to release processors which run a tiny bit faster than they would have otherwise. The rationale is that the extra cooling permitted by the paste will allow CPUs which are a bit faster while still running at acceptable temperatures. Two degrees may allow 3.2Ghz CPUs to run at 3.3Ghz while maintaining the same temperature, for example.
That or everyone will figure out really fast it's a crappy little camera and hacks will be only for the novelty of it.
Exactly. For all the "Wow, 2MP for $11!" posts, I wonder how many people have thought about the quality of the lens, or the non-adjustable (and probably very high) jpg compression level used by the camera, or just how crappy the auto-focus probably is? (And that's for the brand-new cameras; what if you get one that's been reused a few hundred times?) For that matter, is this camera a true 2 megapixel camera, or is that an interpolated 2MP?
Once all the costs of hacking this camera are known, it might just be a better deal to get a $30 toy 640x480 camera. For less effort and possibly less money, you might just get better picture quality!:)
Slashdot Mirror
Yes, nobody is perfect, I'm sure Linux and MacOS have exploits that can do the same things
;)
:) Vulnerabilities in software which is not too common but not extremely obscure either should be included, seeing as how MS recently suffered from a worm which only affected a system running Microsoft's SQL service (not particularly commonly used).
Wow, posting that on SlashDot? Are you ever asking to get flamed!
Seriously, though, I've seen any number of people claim that over the last few days, usually mentioning Linux specifically. Now Linux does have its share of bugs, and there have been worm-capable bugs in common Linux software before (ssh and RedHat's lpd in the last two years), but most Linux vulnerabilities involve privelidge (sp?) escalation (e.g. getting root on a box you already have access to). I cannot think of a single recent exploit for Linux which allows a user to execute arbitrary code on the system without having shell access (much less one in a service installed by default in most distros). This is what a worm requires, of course. At the bare minimum, a worm must be able to run the command to attack other systems without needing any special access to those systems (e.g. knowing all their passwords in advance).
So frankly, no, I don't think that Linux is just as vulnerable as Windows, despite the many claims to the contrary. I have argued that the people who make these claims don't know the difference between different types of vulnerabilities -- they equate the MS RPC vulnerability with, say, the postfix DoS vulnerability, even though the two don't compare in terms of severity or the number of vulnerable systems (not even in terms of the percentage of users who might be vulnerable).
With that in mind, can anyone give me an actual example of a Linux vulnerability from, say, the past year, which would allow the execution of arbitrary code on a Linux box simply by sending properly formed data to that system? If there is currently such a vulnerability in Linux, I should stop arguing against its existence!
Actually, I can't think of a single Chinese actor who has been doing better in the US than in HK.
You might make a case for Jackie Chan. He's had some massive hits in the US (the "Rush Hour" movies), makes a lot of money with relatively little effort by releasing redubbed HK films, and can tap into other revenue sources (How much do you think he got paid for that commercial with Michael Jordan?) All that _in addition_ to continuing to make movies in Hong Kong. He's probably not any worse off for focusing on the US.
Also, didn't Lucy Liu make a couple of movies in HK early in her career?
Nope. Sorry, doesn't work that way. As long as there are people out there who can think independently, there will be some who want to kill you, take your home, rape your children, whatever. As long as human beings have free will, there will be people who wish you harm.
This has nothing to do with what you do or do not do. You can make more people dislike you through your choices, but you can never make no people dislike you.
There may always be a few people who dislike you, but there will be a lot more if you go around being a jerk. Just because some people will always dislike you doesn't mean that you shouldn't try to decrease the number of people who dislike you. You can make people dislike you through your actions, but you can also make people like you through your actions. Let's not forget that.
You can never be loved by everyone. Sooner or later, somebody's going to come along who hates you, hates your way of life, and wants to kill you.
Societies that fail to defend themselves from these kind of people inevitably fall to them... or wake up and start hammering their plowshares into swords.
Don't take too much of an extreme position. Total disarmament is a bad idea, but total emphasis on military force while ignoring the value of diplomacy and PR is also a bad idea. There is a kernel of logic in the grandparent post.
The best way to guarantee a war is to be unprepared for one. And the best way to prevent a war is to be absolutely, undoubtedly ready to wage one if called upon to do so.
The best way to prevent a war is not to start one. Remember, even the weakest nation can choose to pick a fight or not.
Regarding military strength, clearly being the strongest can prevent others from attacking you directly. However, it seems to me that being strong leads to a willingness to use that strength, or even a sense or responsibility that one must use that strength. A sense of "with great power comes great responsibility", perhaps? Yet in the absence of any clear responsibility, what are the strong to do?
I suspect that this is why the strongest military out there (the U.S.) keeps getting involved in so many little wars. They keep feeling as though they _have to_ get directly involved in other nations' problems (e.g. who's in charge in Iraq/Afghanistan/Grenada/Panama/etc.) This side-effect may have unfortunate implications. Wars cause damage to a nation's property and its pride, and cause loved ones to die (remember, enemy soldiers have families too). This leads to a lot of resentment, and a desire to harm the enemy. And while a strong enemy cannot be attacked directly, there are indirect (e.g. terrorist) means of attack...
I don't know about you, but if I couldn't have the average popular song for free, I certainly would not pay for it. I'd spend my hard earned cash on more important things, like junk food.
:)
Oh, I don't disagree with that. I was just pointing out that the people who in my experience download songs from Kazaa (mostly teenagers) couldn't possibly pay for all the songs they downloaded, especially if you assume that they're making 10 copies for each one song they download. Between the sheer number of downloads and the lack of funds, it just ain't happening. Of course, this partially undercuts the argument that the RIAA/artists/whoever is losing money from file-swapping. You can't "lose sales" from people who have no money.
Yeah right. "Community support", that's where it's at. Have you been on any support channels?
:)
s20451: I'm having trouble getting my ATI card to work under Linux. Can anyone help?
HellDog69: LOLOL u noob RTFM
31337h4x0r: u r gay
I hate to tell you this, but all of IRC is like that. I'm pretty sure most IRC clients these days come with a "u r gay" button. It's right next to the "A/S/L" button.
Anyway, here's a suggestion for you: try a newsgroup. There are some grownups on the newsgroups, and most of the conversations use English and involve complete sentences. That's a big step up from IRC.
"A 2002 study funded by the National Institute of Standards and Technology estimated software errors cost the U.S. economy about $59.5 billion a year."
And politicians are worried about entertainment piracy hurting the economy. Maybe there are more important things to fix than catering to the entertainment industry...
Yes, but you must understand that entertainment piracy costs the U.S. economy more. In fact, according to the RIAA's numbers, music piracy alone costs the U.S. economy over _six quintillion_ dollars a year. If they could only convince all those 14-year-old kids to spend millions of dollars each on CDs instead of just downloading the same songs via Kazaa, the U.S. would not only be out of debt, but the average American's salary would increase to tens of thousands of dollars a day (just like the average music industry executive).
Now do you see why entertainment piracy is more important?
Sorry, I meant mass _and distance_. The strength of gravitational attraction depends on both. Doesn't change my argument any, though.
..but if you are really interested in moving around throughout this land of ours with being tracked by big brother's watchful eye in the sky, then you can LEAVE YOUR NOKIA AT HOME.
Do I still have to pay $50/month for that honor?
Seriously, what's the point of having a cellphone if you aren't going to take it with you? Not only is it useless for making outgoing calls, but even if you only leave it behind sometimes, regular callers start to learn that you can't always be reached by cell, so they don't call as much. You might as well get a regular phone and an answering machine.
Not buying a cell phone in the first place seems like a better solution.
Gravity is the LACK of OPPOSING force, caused by a local absorption of this so-called "dark energy" by a local mass. In effect, gravity is a "shadow" produced by the blocking of the dark energy's repulsion from one direction. The net effect of which is to accelerate one body towards another, as each "feels" the "shadow" - the reduced opposition - from the direction of the other.
Okaaaay... then why is it that the strength of the gravitational attraction between objects depends entirely on their mass, rather than on their shape or size?
The sun and moon block the same amount of the Earth's sky. I'm sure we're all familiar with that fact that during a solar elipse, the moon almost exactly blocks out the sun. If gravity is just caused by mass blocking dark energy from one direction, then why does the Sun attract the Earth far more strongly than the Moon does? They should both block just as much dark energy.
Why is it K5 gets the credit for posting the link to SCO's linux source? I already did it here on slashdot back in July
You should have patented the idea.
Soon, very soon, my penis will be the size of North America, and the world will quake in fear.
Quakes, eruptions, floods, whatever... it's all good.
Hopefully a side effect of these pills is sterilization...
:)
How much do you want to bet that there are no ingredients or information on side effects on the label? You might just get your wish.
even more amazing is a coherent FP
Why was this modded funny rather than interesting? It's a good point. It's hard to type up something that's actually coherent (much less smart) so quickly. I guess that none of the "First Post!" whores are subscribers.
My advice -- go to south east Asia and find an undiscovered island.
:)
An undiscovered island with a T3 line.
Maybe the professor can build one with some twigs and coconuts?
I notice how they list the trademarks at the bottom of the press release, except for Linux.
I believe that "Linux" is already a registered trademark of Linus Torvalds. Besides, SCO isn't claiming to _own_ Linux in general (except perhaps in the online FPS gaming sense), just some code in the Linux kernel.
It disturbs me that you are disturbed by the military talking about killing people. What exactly do you think the military does?
:)
Considering the context, maybe he's worried that they're referring to the _pilots_ of these planes?
All you need to do is to get the TK421 modification for your amp and everything will sound much better.
:)
Better yet, take an AK47 to your amp and go acoustic.
Hey, who modded this down? It's actually pretty funny.
that's going to *shred* my render times! thank you! a THREE percent improvement?
:) Hey, that's a 25% improvement! Oh WOW, what a MAJOR ADVANCEMENT in CPU technology!!!
:)
Taking a hypothetical scenario literally is usually a bad idea. What if that 3.2 Ghz core could get to 3.4Ghz? How about 3.5? Why not 4.0?
See, I can adjust my scenario as needed to prove my point, because it's all hypothetical. I only meant this scenario as a description of how thermal paste could be beneficial. My words were not to be taken as literal fact.
On the other hand, try pretending for a moment that you're a hard-core gamer looking for a CPU to play Doom III or Half-Life II with... Now does 3% more speed for free look pretty good?
Of course, better thermal paste wouldn't just benefit the fastest CPUs. A better thermal paste could result in better bin splits. More CPUs would be stable at higher speeds. Can you say "Faster/Cheaper CPUs for everybody"?
since when do disposable (s)cameras come with an auto-focus
You're right. The article says "auto exposure", and I must have read it too quickly.
A year ago the TV people were crying that Tivos and other DVR devices would spell certain doom for free/commercial TV.
Then cable companies started talking seriously about pushing out there own DVR units.
Frankly, I'm not surprised. Right now it is the cable companies who get money from you every month now matter how many/few commercials you see, and it's a cable companies who are renting (and making money off) this Explorer 8000 unit. Sounds like the cable companies know how to make a profit. Here's the simple formula:
1) The more channels/services you get from them, the more money they make.
2) The more restrictions which networks and advertisers place upon the consumer, the less valuable the cable companies' product appears, which leads to customers who aren't willing to pay as much for cable and who start looking into satellite/broadband TV.
3) Thus, the cable companies supply services which other industries may not want them to supply (PVRs, VoIP) while playing just nicely enough with those other companies and/or the government to avoid real problems (lawsuits? regulation?)
Under FCC guidelines, a Homeowner's Association or a landlord cannot prevent a homeowner from installing a satellite dish less than one meter in diameter on any property where the owner has both direct or indirect ownership and exclusive control.
Since when did the FCC have the right to regulate property? These aren't FCC rules, they're part of the Telecommunications Act of 1996, passed by Congress.
Even then, if this involves a permanent modification to your apartment, you probably should still get your landlord's permission before installing anything. If you make any permenant changes to the apartment, you may end up being responsible for the results (e.g. if you damage a railing by attaching a satellite dish poorly).
* stop knocking the thermal pads. retail CPUs use these because joe sixpack can't f*vck it up and claim on their warranty. if you don't like it, scrape it off and stick a blob of arctic silver or similar
* bear in mind AMDs warranty only applies if you use approved thermal solutions
One of the suggestions made by this article is that this carbon-black paste may eventually become the standard. If it works at all, it'll probably become an AMD approved thermal solution. Who knows what'll happen in the long run? Incidentally, the same applies to the other kinds of thermal paste mentioned in the article (a diamond-based type and a carbon-nanotube type), should one of them become the standard.
* who runs within 2 degrees of max temp for their CPU? some crazy overclockers, but it's not exactly reliable practice, is it? if it was 10 degrees, maybe but it's not going to make that much difference
Backing up a bit, if a superior thermal paste does become standard, then the argument is that CPU makers might be willing to release processors which run a tiny bit faster than they would have otherwise. The rationale is that the extra cooling permitted by the paste will allow CPUs which are a bit faster while still running at acceptable temperatures. Two degrees may allow 3.2Ghz CPUs to run at 3.3Ghz while maintaining the same temperature, for example.
That or everyone will figure out really fast it's a crappy little camera and hacks will be only for the novelty of it.
:)
Exactly. For all the "Wow, 2MP for $11!" posts, I wonder how many people have thought about the quality of the lens, or the non-adjustable (and probably very high) jpg compression level used by the camera, or just how crappy the auto-focus probably is? (And that's for the brand-new cameras; what if you get one that's been reused a few hundred times?) For that matter, is this camera a true 2 megapixel camera, or is that an interpolated 2MP?
Once all the costs of hacking this camera are known, it might just be a better deal to get a $30 toy 640x480 camera. For less effort and possibly less money, you might just get better picture quality!
Either they just don't have the time/care to make sure
Remember, you're talking about _guys_ here. We just buy whatever's on the rack. Doubly so if it's on sale.