You can call IBM and they will send you CDs for your ThinkPad. They don't usually come with the laptops from the factory because most people never need them.
It seems that this is severe when the attacker is very "close" in network terms to the server. It relies on the time difference when multiplying numbers in OpenSSL.
So, if you are "far" away from the SSL server, I suppose this attack isn't as "good".
All this talk about closeness and goodness really just means we're using smoke and mirrors.
OpenSSL needs to figure out how to be completely mundane with any input string from the client.
VMWare isn't even close. The zSeries by default has support for 15 (16 total, 1 reserved for the system) Logical Partitions. That's 15 different, independant Operating Systems being run simultaneously right on the hardware. Now, in each of those 15 LPARs you can run VM which multiplexes that LPAR's resources amoung the VM guest operating systems.
VM has been around since the 60's, and is incredibly optimized: so much so that it's very close to actually running on the hardware.
In the VM you have complete access to all devices on the zServer (assuming the guest OS has drivers for them). Can VMware do this? No.. could it, possibly... but it's no where near the maturity that VM is.
In short, no;) However, with the z800 0LF announced IBM has support for full 64bit in the kernel (there are some restrictions in certain situations). But you can choose.
First of all, way to go Slashdot, this article has been out for quite some time. It's received a lot of attention on the Linux 390 mailing list as a Sun FUD campaign as it places a fully loaded z900 on par with 80 Dell servers and the zSeries in general on par with mid-range Sun equipment (and others).
First, I'm fairly qualified to talk about what the zServer can do. For those of you who don't remember, I'm one of the guys that helped win a z800 for Clarkson University that will be used in our Open Source Institute. I'm also the technical lead for COSI (whatever that means;) so it is my job to know about what a z800 can do for us.
Some history, Clarkson University has always had a very good relationship with IBM: they employ a large amount of Clarkson students and graduates (including me, in the Extreme Blue program. So if you think that biases my opinion, well too bad as I've talked with the guys making sure that Linux runs and is fully integrated on the Linux platform and one of the original Linux S390 authors Boas Betzler.
All of these people have real experience with what the zSeries can do, as do I since I've seen it in action. A zServer is unique in the sense that you can (with the right model) run Linux S390, VM, zOS and other guest operating systems in Logical Partitions. These all act independantly of one another just as if they were seperate machines on a network. This is great if you have DB2 with maybe a web frontend because both of those machines can talk at memory speed via HiperSockets and the only outside link is the network connection to the web server, which is at Gigabit speed (did I mention that you can do full speed gigabit with one of these things on multiple interfaces?).
This article basically says that you can take a midrange Sun server and do everything that a z800 can do but much better. I don't know of any Sun Server that can run N Linux clients in a VM at full speed.
They aren't the solution to every problem, but a zServer certainly is a better solution that what is presented in the article. I really don't have the time to go in to detail with everything as it's a lengthy article but suffice it to say that this is no where near 100% accurate.
Let's see... first a Log Based FileSystem cleaner framework for optimization and experimentation. You should look up LFS and LinLog LFS for more information.
Second, a fully debugged, optimized threadpool library with test suite.
Third, global user resource accounting and tracking for the Linux kernel. No more per-login stuff.
Fourth, an addition to the URT, the resource groups... so you put people in to groups and you share resources within that group. (Finance gets 5% Engineering gets 45% of the machine)..
Fourth, a multithreaded debugging tool that works on the binary level to debug multithreaded applications (ie it eliminates race condidtions).
SSorry about the spelling and stuff the conference is ending., We'll post more on the site when we get back.
That "server" that Clarkson won was a zSeries mainframe. They *start* at a cool quarter million bucks US. In the award presentation, the Clarkson president pointed out that it would go the Clarkson Open Source Institute --- a mostly student-run and organized endeavor within the Computer Science department there. Not a bad achievement for five students working on improvements to Linux, and a professor that encouraged them to enter, eh?
"We coordinate the open source Mozilla browser project. Mozilla is an open-source web browser, designed for standards-compliance, performance and portability. "
So, Mozilla is a standards-compliant web browser that just happens to be open source.
So, what you are saying is that a web browser is an application framework? The parts that make up the browser certainly are a framework, that is they are independent of one another and can be used to build other applications from, but I don't think a web browser is an application framework.
mozilla.org goes on to further define Mozilla as a set of open source internet client software projects. Which means that mozilla.org is an organization that keeps track of such things and furthers, but not necessary directly develops these projects.
Now, a web browser certainly is a internet client, but does it really need a calender module to browse the web? I don't think so, in fact I believe that they should freeze the modules and just get the browser done.
A principle of software development is putting off decisions until you absolutely need to make them. I think figuring out what modules you can build in or around a browser should definitely be put off until you have a complete browser released.
So, Mozilla has gone from a browser, to a browsing platform to an complete productivity suite? Wow.. it's just like Microsoft Word, you have 2^10 little buttons/menus/options to choose from yet all you want to do is write a stupid paper.
Wouldn't it be nice if the Mozilla people learned from Microsoft that having many features does not make something more useful.
All I want to do is browse web pages using a stable, fast, and standards compliant web browser. Is that so much to ask? I don't care if I can instant message, chat on IRC, and maintain my schedule of appointments.
Is it so hard to finish a project without including 10 things that aren't central to that project's success or function?
I think this is the first RedHat release from 1995. Here's some of the README:
Red Hat Commercial Linux
Mother's Day + 0.1 Release 1995
The contents of this CD-ROM are Copyright (C) 1995 Red Hat Software
and others. Please see the individual copyright notices in each source
package for distribution terms. The distribution terms of the tools
copyrighted by Red Hat Software are as noted in the file COPYING.
The docs subdirectory contains lots of information. The answers to
most of your questions are probably in there somewhere! Please see
http://www.redhat.com/ and/or ftp://ftp.redhat.com/ for the latest
information, installation tips, new packages, etc.
Broken? I'd say generally foobar'd. My Banshee card goes squirrley making my console display impossible to read after XFree86 crashes. I had to reboot and loose my excellent uptime. I didn't see any issues in the release notes.. don't people test these things??
I always like the easter eggs in SimCity 2000. Type in "porn" and you hear "Can't get enough!" That along with some others it made for a very comical game at times, I mean really, right clicking on the helicopter to make it crash? Ah well, it was a fun game.
Microsoft is still out there; only now we have to put up with two companies. So now instead of having one place to target our frustrations at we have two. Looking at the revenues from 1999, it doesn't really matter much whether or not the company is split. Maybe instead of fracturing Microsoft, everyone should band together and provide and alternative that has the appeal that Windows does/did.
Slashdot Mirror
Let's see..
"Although Cisco cannot guarantee the accuracy of all statements in this advisory, all of the facts have been checked to the best of our ability."
This is probably a standard disclaimer in their security documents, but wouldn't you want them to be sure of the accuracy of their statements?
Why can software/hardware companies get way with "We tried our best, honest!" ?
Just to prove it exists:
Reverse Engineering Compiler
You can call IBM and they will send you CDs for your ThinkPad. They don't usually come with the laptops from the factory because most people never need them.
Basically it costs less on their part.
Yeah that's right, you can still download the code
It seems that this is severe when the attacker is very "close" in network terms to the server. It relies on the time difference when multiplying numbers in OpenSSL.
So, if you are "far" away from the SSL server, I suppose this attack isn't as "good".
All this talk about closeness and goodness really just means we're using smoke and mirrors.
OpenSSL needs to figure out how to be completely mundane with any input string from the client.
Amazing that another Evanchik uses Slackware ;)
VMWare isn't even close. The zSeries by default has support for 15 (16 total, 1 reserved for the system) Logical Partitions. That's 15 different, independant Operating Systems being run simultaneously right on the hardware. Now, in each of those 15 LPARs you can run VM which multiplexes that LPAR's resources amoung the VM guest operating systems.
VM has been around since the 60's, and is incredibly optimized: so much so that it's very close to actually running on the hardware.
In the VM you have complete access to all devices on the zServer (assuming the guest OS has drivers for them). Can VMware do this? No.. could it, possibly... but it's no where near the maturity that VM is.
In short, no ;) However, with the z800 0LF announced IBM has support for full 64bit in the kernel (there are some restrictions in certain situations). But you can choose.
First of all, way to go Slashdot, this article has been out for quite some time. It's received a lot of attention on the Linux 390 mailing list as a Sun FUD campaign as it places a fully loaded z900 on par with 80 Dell servers and the zSeries in general on par with mid-range Sun equipment (and others).
;) so it is my job to know about what a z800 can do for us.
First, I'm fairly qualified to talk about what the zServer can do. For those of you who don't remember, I'm one of the guys that helped win a z800 for Clarkson University that will be used in our Open Source Institute. I'm also the technical lead for COSI (whatever that means
Some history, Clarkson University has always had a very good relationship with IBM: they employ a large amount of Clarkson students and graduates (including me, in the Extreme Blue program. So if you think that biases my opinion, well too bad as I've talked with the guys making sure that Linux runs and is fully integrated on the Linux platform and one of the original Linux S390 authors Boas Betzler.
All of these people have real experience with what the zSeries can do, as do I since I've seen it in action. A zServer is unique in the sense that you can (with the right model) run Linux S390, VM, zOS and other guest operating systems in Logical Partitions. These all act independantly of one another just as if they were seperate machines on a network. This is great if you have DB2 with maybe a web frontend because both of those machines can talk at memory speed via HiperSockets and the only outside link is the network connection to the web server, which is at Gigabit speed (did I mention that you can do full speed gigabit with one of these things on multiple interfaces?).
This article basically says that you can take a midrange Sun server and do everything that a z800 can do but much better. I don't know of any Sun Server that can run N Linux clients in a VM at full speed.
They aren't the solution to every problem, but a zServer certainly is a better solution that what is presented in the article. I really don't have the time to go in to detail with everything as it's a lengthy article but suffice it to say that this is no where near 100% accurate.
Let's see... first a Log Based FileSystem cleaner framework for optimization and experimentation. You should look up LFS and LinLog LFS for more information.
Second, a fully debugged, optimized threadpool library with test suite.
Third, global user resource accounting and tracking for the Linux kernel. No more per-login stuff.
Fourth, an addition to the URT, the resource groups... so you put people in to groups and you share resources within that group. (Finance gets 5% Engineering gets 45% of the machine)..
Fourth, a multithreaded debugging tool that works on the binary level to debug multithreaded applications (ie it eliminates race condidtions).
SSorry about the spelling and stuff the conference is ending., We'll post more on the site when we get back.
That "server" that Clarkson won was a zSeries mainframe. They *start* at a cool quarter million bucks US. In the award presentation, the Clarkson president pointed out that it would go the Clarkson Open Source Institute --- a mostly student-run and organized endeavor within the Computer Science department there. Not a bad achievement for five students working on improvements to Linux, and a professor that encouraged them to enter, eh?
Actually, from the mozilla.org page:
"We coordinate the open source Mozilla browser project. Mozilla is an open-source web browser, designed for standards-compliance, performance and portability. "
So, Mozilla is a standards-compliant web browser that just happens to be open source.
So, what you are saying is that a web browser is an application framework? The parts that make up the browser certainly are a framework, that is they are independent of one another and can be used to build other applications from, but I don't think a web browser is an application framework.
mozilla.org goes on to further define Mozilla as a set of open source internet client software projects. Which means that mozilla.org is an organization that keeps track of such things and furthers, but not necessary directly develops these projects.
Now, a web browser certainly is a internet client, but does it really need a calender module to browse the web? I don't think so, in fact I believe that they should freeze the modules and just get the browser done.
A principle of software development is putting off decisions until you absolutely need to make them. I think figuring out what modules you can build in or around a browser should definitely be put off until you have a complete browser released.
So, Mozilla has gone from a browser, to a browsing platform to an complete productivity suite? Wow.. it's just like Microsoft Word, you have 2^10 little buttons/menus/options to choose from yet all you want to do is write a stupid paper.
Wouldn't it be nice if the Mozilla people learned from Microsoft that having many features does not make something more useful.
All I want to do is browse web pages using a stable, fast, and standards compliant web browser. Is that so much to ask? I don't care if I can instant message, chat on IRC, and maintain my schedule of appointments.
Is it so hard to finish a project without including 10 things that aren't central to that project's success or function?
I think this is the first RedHat release from 1995. Here's some of the README:
Red Hat Commercial Linux
Mother's Day + 0.1 Release 1995
The contents of this CD-ROM are Copyright (C) 1995 Red Hat Software
and others. Please see the individual copyright notices in each source
package for distribution terms. The distribution terms of the tools
copyrighted by Red Hat Software are as noted in the file COPYING.
The docs subdirectory contains lots of information. The answers to
most of your questions are probably in there somewhere! Please see
http://www.redhat.com/ and/or ftp://ftp.redhat.com/ for the latest
information, installation tips, new packages, etc.
Here's a link to the actual docket http://www.rambusite.com/RambusVsInfineon/Docket.h tm .
It probably would be nice to have someone comment on what was exactly denied in the ruling.
There isn't really much in the article..... some of the links mentioned would have been a better news source.
Broken? I'd say generally foobar'd. My Banshee card goes squirrley making my console display impossible to read after XFree86 crashes. I had to reboot and loose my excellent uptime. I didn't see any issues in the release notes.. don't people test these things??
I always like the easter eggs in SimCity 2000. Type in "porn" and you hear "Can't get enough!" That along with some others it made for a very comical game at times, I mean really, right clicking on the helicopter to make it crash? Ah well, it was a fun game.
Microsoft is still out there; only now we have to put up with two companies. So now instead of having one place to target our frustrations at we have two. Looking at the revenues from 1999, it doesn't really matter much whether or not the company is split. Maybe instead of fracturing Microsoft, everyone should band together and provide and alternative that has the appeal that Windows does/did.