You've never had it happen because IE has never been able to do it before.
It happens now because as a side effect of "automatically decoding" like webbrowsers have always done on the mac, the executable gets executed... which is NOT how it has always been.
Turning off autodecoding should not be necessary to prevent code getting executed automatically.
The fact that in the default configuration this is how it is is all that matters.
2) no you do not need to authorize a download, any website can download anything the hell it wants to your computer. No you do not need to click to start downloads.
1) stores a header which contains the macos finder file information, modification dates, icon settings, filetype, creator code, etc etc,
2) appends the data fork to the header
3) appends the resource fork to the header+data
4) converts the lot to a 7 bit ascii encoding, like UU encoding.
The real difference is 1,2 & 3
There is another encoding, MacBinary (.bin) which is similar to binhex, but uses an 8 bit encoding, so is 1/8th more efficient.. ie it just does steps 1,2 & 3, without the 4th (uuencode style) step.
.bin is preferred,.hqx is required for email and other brain dead transport formats.
The reason to binhex something is to preserve the resource fork and the filetype/creator code.
This means the.sit is actually irrelevant and is actually there for user's benefit.
If you renamed a shell script to.sit and binhexed it, it would either...
Be associated with stuffit by its filetype (if you set that right) in which case it would not execute, but would be opened by stuffit, and reported as corrupt.
Or it would be associated with stuffit based on the.sit (if you left the filetype blank) in which case it would also be reported as corrupt.
If you wrote a simple app in C, which did what you want, then binhexed that, then yes, that would work, and that's where the problem comes from:(
I'll try to explain why its a really really dumb idea:)
If IE just auto decoded binhex files (like every other internet app on the mac)
Then there would be no point in making a small 4KB app which can be downloaded and executed in the background...
If IE would debinhex, then execute those files, then you can setup webpages to automatically download such a file when an IE/OSX.1 user comes along, most users won't even notice a 4KB binary download, after all the graphics are bigger than that.
And as soon as it downloads... it executes... if classic is running, it'll execute in a 10th of as second, it can even be made into a daemon app, so you won't even know its running,
it can then copy itself to the startup items...
instant perma exploit, by simply adding a java script to some website waiting for any OSX.1 IE user to come by.
AND this isn't a theoretical problem, this has shipped in Apple's 10.1 release of OSX, where the default webbrowser causes it.
This is a serious threat, if only because its soooooo easy to exploit.
And it was nothing else except microsoft's stupidity which caused it.
Actually, the EASIEST way is to walk up to the box, insert the OSX CD you happen to have (don't we all have one?)
give it a 3 fingered salute, hold c, then choose "Reset Password..." from the file menu.
Click root,
make up a new password,
confirm it
then quit (which will restart back into OSX)
you now know the root password.
Word to the wise, it is possible to secure OSX boxes against this by password protecting OpenFirmware, which will prevent CD booting without knowing the firmware password.
Physical access is not a security exploit... imagine a DoS on a machine with physical access... that means you pulled the plug.
Running MacOS on PPCLinux is fairly efficient as their is no instruction level emulation.
Its the same as Classic in MacOS X (yes, 10.1 rocks:))
Anywho, the performance problems come from the video display. Normally the video display is hardware, and normally in a windowed x environment it would be mapped to some buffer... overhead, etc... slows it down, makes redraws slower.
This can often be improved by running the 'emulation' or virtual machine in fullscreen mode... I haven't played with MoL in a long time. But it wouldn't be as good as native macos because it really is abstracted from the hardware. BUT performance wise you'd be getting very similar cpu benchmark type numbers as the cpu is essentially the same.
Now when you run windows emu on a mac (even a MoL Mac) then you are not only emulating the graphics hardware, (sound hardware, IDE hardware et al;)) but your emulating the cpu... this is the killer and is what makes VirtualPC slow.
It is slow... and the graphics are even slower... even though virtual pc has done a lot of work to make it as fast as they can, then you run that through mol... hehehe
Now, you then use directx, to take advatage of hardware features of the the emulated pc, running on the virtual mac...
HHEHHEHEHEHE
:)
VirtualPC2 could apparently do this with Voodoo2 cards, but I never got it working... it worked by passing the actual PCI instructions through to the voodoo from the windows environment... or something.
You can enable root... and then root is fully enabled.
Preeching that its not just shows pure ignorance!
How to Enable ROOT on MacOSX
1) launch/Applications/Utilities/NetInfo Manager
2) menu: Domain->Security->Authenticate
3) enter your password (you're an admin right)
4) menu: Domain->Security->Enable Root User
5) follow the prompts
TADA!
You can now su to root, you can login as root, you can ssh as root and you can login to the gui as root...
you can even sudo.
Whatever.
---
Live Long & Prosper \\//_
CYA STUX =`B^) 'da Captain,
I thought I'd just point out (BTW I'm using OSX fulltime now, and it rocks:))
I'd just point out a different future;)
Apple ships GCC and ProjectBuilder and InterfaceBuilder and ALL the Mac OS programming documentation and the kernel documentation WITH THEIR CONSUMER OS RETAIL DISTRIBUTION!
These are the same tools that the OS was built with!
I'm just pleased at the prospect of all them kiddies finding their Developer CDs with their iMacs and getting into it... one day... well, thats how I got started programming:)
Of course, it wasn't with iMacs;))
---
Live Long & Prosper \\//_
CYA STUX =`B^) 'da Captain,
I would hazard to guess that the real true wizard is The Woz:)
BUT, its been so long since I did the entire Tolkien thing (must do it again, after I do the Jordan thing again;)) that I can't remember the right guy:)
Probably someone from Silmarillion, as Gandalf altho great, is far more active than The Woz:)
---
Live Long & Prosper \\//_
CYA STUX =`B^) 'da Captain,
I would guess most of you haven't really used a trackpad, or a single button trackpad,
the honest truth is the trackpad is the best portable pointing device.
Tracballs work... trackpads are better.
nipples, they suck. Its the equivalent of using a finger joystick to steer your mouse.
I don't use a joystick to control my mouse on my desktop, why the hell would I do it on my laptop!
When I want to click some widget, I just think widget and before I know its clicked (mousing is autonomous to me;))
but with a nipple its like a mini racing game to steer the cursor, slow down, adjust and swirl around a few times...
Its just stupid.
Now.. about mousebuttons...
on a desktop, you just get a usb mouse you like... I actually had a triple button wonder until recently... I traded it in for the gelcap mouse:)
Love it... just apply pressure you click.... my left hand never leaves the keyboard, where it hovers on the left side... where all the modifier keys are
so we can choord a huge amoount of mouse clicks with the shift-ctrl-opt-cmd keys
but on a laptop its even better... the trackpad is between your right and left hands...
so your left hand is always on the keyboard in the touch type position, right moves between the trackpad and the keyboard... left can always pushing the cntrl key or cmd key or whatever to get how ever many keyclicks you want
So sure, you might not like it... but the single mousebutton is the right choice for the APPLE PowerBook G4 Titanium... and I'm sure you'll get use to cmd and cntrl clicking in linux very soon if you got one... but thats only when you're on the road...
when your on a desk... pull out your USB mouse of choice and plug it in... them MS optical mice work too:)
---
Live Long & Prosper \\//_
CYA STUX =`B^) 'da Captain,
(Yes MacOS can do that... but only for special cases... ie you can't make use of a lot of the API inside a preemptive task, but you can decode MP3 audio and pipe it to the audio hardware;) )
Anywho, the big killer for MP3 on the mac is Virtual Memory.
If you have the ram, get rid of it. You'll love it.
It'll be snappy, fast and smooth:)
(I'd recommend about 180+MB for a serious mac user:) )
--- Live Long & Prosper \\//_ CYA STUX =`B^) 'da Captain,
Actually... I think what Jon was trying to say is that the open media responds to the whims of the readers...
Heh... and not by just sacking journalists;)
(necessarily!)
What I mean, is an open news article is open to online debate at the source of the article.
If you don't agree with the author.. Say it.
If your point is valid... or just sounds good... depending on the system (and perhaps how good it is... slashdot of course being particularly advanced:) ) then it floats to the top
gems among the crap and all that stuff:)
Of course... you try this with a close media article...
say a small article about japanese uranium mishaps...
You have to send a letter to the editor.. and perhaps on his whim he'll put it in a small box somewhere... or just throw it in a bin so he can make room for an advert.. of course if he does put it in, then it goes in 2 months later...
And no one has clue what the original article was about!
The open media... you say it. It gets seen, and frozen for all time as part of the article...
So open articles are not finished when they are 'uploaded'...
Just like this article was more an introduction to the following comments!
--- Live Long & Prosper \\//_ CYA STUX =`B^) 'da Captain,
Slashdot Mirror
10.1 *IS* the bugfix.
:)
;))
:)
Put it on, its GOOD
Heh, with it your iBook will be faster than it is with 9.1
(well, maybe
its close anywho
Short answer... Yes.
Heh.
All the major plugins are available for macos, just like they are for windows.
Some of the more obscure ones aren't... such as JayBeam's new BeamBasedVectorGraphicsIn3DCocktails Viewer Plugin.
Oh Well.
Damnit, read the article
;))
You've never had it happen because IE has never been able to do it before.
It happens now because as a side effect of "automatically decoding" like webbrowsers have always done on the mac, the executable gets executed... which is NOT how it has always been.
Turning off autodecoding should not be necessary to prevent code getting executed automatically.
The fact that in the default configuration this is how it is is all that matters.
(I loved that sentence
What you don't seem to realise is
1) IE *DOES* launch the results of the download.
and here's the killer
2) no you do not need to authorize a download, any website can download anything the hell it wants to your computer. No you do not need to click to start downloads.
BinHex (.hqx) does 4 main things
.hqx is required for email and other brain dead transport formats.
1) stores a header which contains the macos finder file information, modification dates, icon settings, filetype, creator code, etc etc,
2) appends the data fork to the header
3) appends the resource fork to the header+data
4) converts the lot to a 7 bit ascii encoding, like UU encoding.
The real difference is 1,2 & 3
There is another encoding, MacBinary (.bin) which is similar to binhex, but uses an 8 bit encoding, so is 1/8th more efficient.. ie it just does steps 1,2 & 3, without the 4th (uuencode style) step.
.bin is preferred,
No :)
.sit is actually irrelevant and is actually there for user's benefit.
.sit and binhexed it, it would either...
.sit (if you left the filetype blank) in which case it would also be reported as corrupt.
:(
The reason to binhex something is to preserve the resource fork and the filetype/creator code.
This means the
If you renamed a shell script to
Be associated with stuffit by its filetype (if you set that right) in which case it would not execute, but would be opened by stuffit, and reported as corrupt.
Or it would be associated with stuffit based on the
If you wrote a simple app in C, which did what you want, then binhexed that, then yes, that would work, and that's where the problem comes from
MacOS *IS* shipping with this version installed. It was released this Saturday, it's almost impossible to get copies, it's that popular.
Apple's download servers are melting, queues at stores have been 300 people deep.
IT IS SHIPPING! IE IS INSTALLED! ITS THE DEFAULT. AND IT HAS THIS SERIOUS FLAW.
Its just a good thing this is MacOS and not WindowsXP.
BUT the version of macos which shipped like this (thankyou MS) is Apple's equivalent to MS Windows XP.
Go figure.
I'll try to explain why its a really really dumb idea :)
If IE just auto decoded binhex files (like every other internet app on the mac)
Then there would be no point in making a small 4KB app which can be downloaded and executed in the background...
If IE would debinhex, then execute those files, then you can setup webpages to automatically download such a file when an IE/OSX.1 user comes along, most users won't even notice a 4KB binary download, after all the graphics are bigger than that.
And as soon as it downloads... it executes... if classic is running, it'll execute in a 10th of as second, it can even be made into a daemon app, so you won't even know its running,
it can then copy itself to the startup items...
instant perma exploit, by simply adding a java script to some website waiting for any OSX.1 IE user to come by.
AND this isn't a theoretical problem, this has shipped in Apple's 10.1 release of OSX, where the default webbrowser causes it.
This is a serious threat, if only because its soooooo easy to exploit.
And it was nothing else except microsoft's stupidity which caused it.
Actually, the EASIEST way is to walk up to the box, insert the OSX CD you happen to have (don't we all have one?)
give it a 3 fingered salute, hold c, then choose "Reset Password..." from the file menu.
Click root,
make up a new password,
confirm it
then quit (which will restart back into OSX)
you now know the root password.
Word to the wise, it is possible to secure OSX boxes against this by password protecting OpenFirmware, which will prevent CD booting without knowing the firmware password.
Physical access is not a security exploit... imagine a DoS on a machine with physical access... that means you pulled the plug.
Running MacOS on PPCLinux is fairly efficient as their is no instruction level emulation.
:))
;)) but your emulating the cpu... this is the killer and is what makes VirtualPC slow.
Its the same as Classic in MacOS X (yes, 10.1 rocks
Anywho, the performance problems come from the video display. Normally the video display is hardware, and normally in a windowed x environment it would be mapped to some buffer... overhead, etc... slows it down, makes redraws slower.
This can often be improved by running the 'emulation' or virtual machine in fullscreen mode... I haven't played with MoL in a long time. But it wouldn't be as good as native macos because it really is abstracted from the hardware. BUT performance wise you'd be getting very similar cpu benchmark type numbers as the cpu is essentially the same.
Now when you run windows emu on a mac (even a MoL Mac) then you are not only emulating the graphics hardware, (sound hardware, IDE hardware et al
It is slow... and the graphics are even slower... even though virtual pc has done a lot of work to make it as fast as they can, then you run that through mol... hehehe
Now, you then use directx, to take advatage of hardware features of the the emulated pc, running on the virtual mac...
HHEHHEHEHEHE
:)
VirtualPC2 could apparently do this with Voodoo2 cards, but I never got it working... it worked by passing the actual PCI instructions through to the voodoo from the windows environment... or something.
Something you might not realise is that Mac OS volumes are named... not lettered ;)
:)
/vol/Mac\ OS\ 9.2
Heheh..
Its common when you're into running 7 different versions of MacOS on your hardware to name various partitions after the OS on them...
You don't *need* to use different partitions, but it works better that way
Anywho,
Installing onto
heheh
Installing macos-9.2 onto
:)
Listen.
/Applications/Utilities/NetInfo Manager
You can enable root... and then root is fully enabled.
Preeching that its not just shows pure ignorance!
How to Enable ROOT on MacOSX
1) launch
2) menu: Domain->Security->Authenticate
3) enter your password (you're an admin right)
4) menu: Domain->Security->Enable Root User
5) follow the prompts
TADA!
You can now su to root, you can login as root, you can ssh as root and you can login to the gui as root...
you can even sudo.
Whatever.
---
Live Long & Prosper \\//_
CYA STUX =`B^) 'da Captain,
http://openquicktime.sourceforge.net
GPL.
---
Live Long & Prosper \\//_
CYA STUX =`B^) 'da Captain,
I thought I'd just point out (BTW I'm using OSX fulltime now, and it rocks :))
I'd just point out a different future ;)
Apple ships GCC and ProjectBuilder and InterfaceBuilder and ALL the Mac OS programming documentation and the kernel documentation WITH THEIR CONSUMER OS RETAIL DISTRIBUTION!
These are the same tools that the OS was built with!
I'm just pleased at the prospect of all them kiddies finding their Developer CDs with their iMacs and getting into it ... one day... well, thats how I got started programming :)
Of course, it wasn't with iMacs ;))
---
Live Long & Prosper \\//_
CYA STUX =`B^) 'da Captain,
We have 3ivx running in the lab on Alphas.
:)
:)
We have 3ivx running on Solaris (well sunos should work too)
We have 3ivx running on BeOS
We have 3ivx running on MacOS
We have 3ivx running on Windows, in Windows Media Player & QuickTime
We have 3ivx running on Linux x86 and LinuxPPC
We have 3ivx running in XAnim
We have 3ivx running in Quicktime4Linux
We even have 3ivx running on Amigas! 68k and PPC!!!
We are working on more
Including V4L2, and PS2
Just so you know
---
Live Long & Prosper \\//_
CYA STUX =`B^) 'da Captain,
I would hazard to guess that the real true wizard is The Woz :)
;)) that I can't remember the right guy :)
:)
BUT, its been so long since I did the entire Tolkien thing (must do it again, after I do the Jordan thing again
Probably someone from Silmarillion, as Gandalf altho great, is far more active than The Woz
---
Live Long & Prosper \\//_
CYA STUX =`B^) 'da Captain,
What the hell are you smoking beavis.
:)
:)
4:3 is the CURRENT standard as used in NTSC.
macs have 1:1 pixels, so its really easy to work out the aspect ration...
anyway, you will find the aspect ratio is closer to that of whats generally called WideScreen 16:9
Which works out to be fantastic for watching most DVDs
no black bars, or very little one when you watch a 2.35:1 title
---
Live Long & Prosper \\//_
CYA STUX =`B^) 'da Captain,
I would guess most of you haven't really used a trackpad, or a single button trackpad,
;))
:)
:)
the honest truth is the trackpad is the best portable pointing device.
Tracballs work... trackpads are better.
nipples, they suck. Its the equivalent of using a finger joystick to steer your mouse.
I don't use a joystick to control my mouse on my desktop, why the hell would I do it on my laptop!
When I want to click some widget, I just think widget and before I know its clicked (mousing is autonomous to me
but with a nipple its like a mini racing game to steer the cursor, slow down, adjust and swirl around a few times...
Its just stupid.
Now.. about mousebuttons...
on a desktop, you just get a usb mouse you like... I actually had a triple button wonder until recently... I traded it in for the gelcap mouse
Love it... just apply pressure you click.... my left hand never leaves the keyboard, where it hovers on the left side... where all the modifier keys are
so we can choord a huge amoount of mouse clicks with the shift-ctrl-opt-cmd keys
but on a laptop its even better... the trackpad is between your right and left hands...
so your left hand is always on the keyboard in the touch type position, right moves between the trackpad and the keyboard... left can always pushing the cntrl key or cmd key or whatever to get how ever many keyclicks you want
So sure, you might not like it... but the single mousebutton is the right choice for the APPLE PowerBook G4 Titanium... and I'm sure you'll get use to cmd and cntrl clicking in linux very soon if you got one... but thats only when you're on the road...
when your on a desk... pull out your USB mouse of choice and plug it in... them MS optical mice work too
---
Live Long & Prosper \\//_
CYA STUX =`B^) 'da Captain,
Do you remember how different the PowerMac G3 was when it came out?
;)
;)
;)
:)
;)
;)
:)
It was a completely new motherboard, new zif socket, new IDE drives, new formfactor...
It was ATX. Used IDE... new chip...
How much faster was it...
LOTS...
Now, cast your memory back to the Clone Wars
PowerComputing were about to launch their new Death Star
It was based on the PowerPC 750 and was in all reports totally whipping the pants off of Apple's current offering.
What was Apple working on... PowerExpress...
I think PowerExpress was probably just a 9700
Anywho.
What do you think Apple got for their 100M$?
They got Gossamer. That's what the got.
Here's the deal.
PowerComputing designed the PowerMac G3.
It has a god damn ATX mono and ATX powersupply it uses EIDE and SCSI drives.
On board ATI Rage Pro.
Expandable VRAM
Zif Slot for CPU
ROM on a card.
Dips for bus/clock speed.
These are hallmarks of the PowerComputing Machines
Now... I hope that leaves you with some food for thought
Anywho, I have to go and replace the cpu fan on my PowerCentre Pro
Apple bought PCC, whacked the new PCC computer into an outrigger case and released it.
If PCC had, apple would've died.
Another point. The PMG3 is a CHRP machine. Why did apple build a CHRP machine? They didn't. PCC did.
Think about it. Remember the time.
You know I speak the truth
---
Live Long & Prosper \\//_
CYA STUX =`B^) 'da Captain,
You answered the question.
:)
The ONLY reason Apple users are so loyal to Apple, is they make a product which we... Like.
LOTS.
We may hate the company. But compaq don't make macs. And if they did.. they'd probably look like bottle rockets or something
---
Live Long & Prosper \\//_
CYA STUX =`B^) 'da Captain,
SoundJam works great.
:)
;) )
:)
:) )
It plays the MP3s preemptively
(Yes MacOS can do that... but only for special cases... ie you can't make use of a lot of the API inside a preemptive task, but you can decode MP3 audio and pipe it to the audio hardware
Anywho, the big killer for MP3 on the mac is Virtual Memory.
If you have the ram, get rid of it. You'll love it.
It'll be snappy, fast and smooth
(I'd recommend about 180+MB for a serious mac user
---
Live Long & Prosper \\//_
CYA STUX =`B^) 'da Captain,
Actually... I think what Jon was trying to say is that the open media responds to the whims of the readers...
;)
:) ) then it floats to the top
:)
Heh... and not by just sacking journalists
(necessarily!)
What I mean, is an open news article is open to online debate at the source of the article.
If you don't agree with the author.. Say it.
If your point is valid... or just sounds good... depending on the system (and perhaps how good it is... slashdot of course being particularly advanced
gems among the crap and all that stuff
Of course... you try this with a close media article...
say a small article about japanese uranium mishaps...
You have to send a letter to the editor.. and perhaps on his whim he'll put it in a small box somewhere... or just throw it in a bin so he can make room for an advert.. of course if he does put it in, then it goes in 2 months later...
And no one has clue what the original article was about!
The open media... you say it. It gets seen, and frozen for all time as part of the article...
So open articles are not finished when they are 'uploaded'...
Just like this article was more an introduction to the following comments!
---
Live Long & Prosper \\//_
CYA STUX =`B^) 'da Captain,
Its worse when you learn japanese from playing importanted japanese Nintendo games :)
:)
Aryupa
---
Live Long & Prosper \\//_
CYA STUX =`B^) 'da Captain,
Yes,
:)
;)
;)
;)
Akira + Ghost In The Shell are definatly some of my most faveourite animes
NinjaScroll is up there too
BUT, you really haven't seen akira properly until you've seen it at least 4 times....
Bit like the Matrix that way, but you only need to see the matrix 3 times or so
Mind you, I think I saw it 8 times in the cinema
---
Live Long & Prosper \\//_
CYA STUX =`B^) 'da Captain,
Nausicaa is great :)
;)
Also known as "Warriors of the Wind" the dubbed version
Heh.
---
Live Long & Prosper \\//_
CYA STUX =`B^) 'da Captain,