Standing up for the rights of Russian crackers to break into US banks and ecommerce sites to steal credit cards doesn't strike me as something that your congressperson will be very likely to do.
This case has only a slight relation to computers at all... It's more of a foreign policy matter. It's nothing like the Syklarov case. These were real criminals committing real crimes, stealing real money through fraud and computer intrusion.
Gorshkov was convicted a year ago on 20 counts of computer crimes, fraud and conspiracy after being accused of helping Alexey Ivanov steal credit card numbers from U.S. online banks, e-commerce companies and Internet service providers, the U.S. Attorney's office in Seattle said.
Let the Russian government and foreign policy pundits work this one out. This is nothing like the Skylarov case. These were real criminals committing real crimes.
I hate the government as much as the next guy, but give me a break!
Overall, a pretty dull interview, I could almost hear him yawning.
That's the way Linus always is in interviews with the press. I don't think this PR stuff really exictes him, especially since people are always asking about MS, something he really doesn't care about. He's told them over and over, he really doesn't care what MS is doing, as long as he can continue to make Linux better than Linux.
People always tend to ask kernel hackers about the latest desktop environments, or about things they really don't care much about other than as users of said applications.
It's like, imagine you worked on aircraft engines, even designed a revolutionary engine... and in interviews, people always asked you about the latest wing design and advances in providing high speed internet access to passengers... it's tangential to what you are interested in. You'd sound bored too.
Another thing, for those with Dish Network, scan up around the 9000 channels, and look for Washington University TV. Find the "business law" courses, and watch them. Good stuff.
So few Ask Slashdot questions can really be truly answered based just on the posted question,
There are only a few types of Ask Slashdot questions:
1. Ones where the question is answered in the first 5 posts, it's usually something a quick Google or Freshmeat search would have answered. These are also known as Cliffisms(tm).
2. One that asks for specific legal advice. Obviously this isn't free-lawyers-who-like-to-accept-tons-of-liability- by-giving-half-assed-legal-advice.com, so these questions can never be answered.
3. One that asks something like this. Usually the scope is too broad to give a meaningful answer, but sometimes some good ideas get thrown about. This is probably the most interesting, but still not too effective usually, unless the scope of the question is just right, which is rare.
Well, these things generally go in cycles, if companies get too tight, they will fail, and more progressive companies will take their place as industry leaders. The market does work in large part.
We just need proper enforcement of laws that are already widely established. Fraud was always illegal. Fraud on a national scale is still something the federal government would have to be involved in. The constitution gives the federal government power to regulate interstate commerce.
If you look at the cause of a lot of the problems of the last two years, you will find rampant fraud on many levels. If it weren't for the criminal actions of thousands of businessmen, we wouldn't be in nearly as bad a situation right now.
The great thing about Libertarianism isn't just freedom, it's personal responsibility. A Libertarian government wouldn't be letting these CEOs and investment advisors go with a slap on the wrist, as some of them seem to be getting away with (however in the last few months, they have finally decided to come down hard on certain ones).
What's the use of industries making us crap and giving us paychecks if we've got no consumer rights?
Exactly. Without the government protecting industry through legislation, bribes, kickbacks, etc... We would have all the consumer rights we need.
Laws are the source of the problems in almost all cases, not the solution to the problem. Have you read the green party platform? It's like 200 pages and outlines a very regulated and restricted society. Less government is the answer, not more.
Libertarians are the only people that would protect your rights by allowing the free market to work the way it was supposed to. A common myth is that Libertarians would let monopolies abuse consumers. Any true advocate of the free market realizes the damage that monopolies cause. The government wouldn't be completely impotent under a more Libertarian society, it would only be reduced to levels that would let the free market solve these problems.
Off the top of my head, here's [securityfocus.com] one.
A bug in Slash isn't newsworthy. Everyone knows Slash is a hacked together mess of perl scripts. PHPNuke is equally messy and bug-ridden, and has had dozens of alerts against it, and it is more widely used than Slash. Still, any of these third party apps have tiny installation numbers compared to something like IIS or Bind or Apache. You can't expect Slashdot to cover every security alert on every piece of software.
If you want to be on top of security issues, follow SecurityFocus, not Slashdot.
I do (bugtraq, incidents, focus-linux, forensics), and almost always, Slashdot covers all major vulernabilities that I see on the lists, in Windows based software and in Linux.
The only thing they don't regularly cover is incidents, even if they are major incidents. There have been a couple incidents that I submitted to Slashdot and I think should have been posted, but weren't.
But I'll be fucked if I understand why Slashdot does this sort of thing
I'll admit the editors are a little biased, but after all, this IS a free software centered site. All news sites have bias. As far as the posters go, you can't hold the editors accountable for what the posters post.
Yeah, as long as the consumer doesn't happen to work for an evil corporation, or worse yet, owns his or her own evil corporation, or maybe evil corporations might pay his bills by being his or her customer.
What's the use of consumer rights after industry is hindered to the point that no one has any money left to spend?
It's a standard part of the SSH suite that acts similar to ftp, you browse the files and download them and such. Really if you don't even know what sftp is, you don't have much room to comment.
Yeah but Java/Javascript/ActiveX at least had some forethought about security. Hacking Outlook to execute VBS code seemed to be an incredibly stupid move, only something that a braindead company like MS would do.
Most AV vendors have an email address you can send suspected malicious code to. Also, some large companies have expensive AV contracts, and a lot get found that way.
The OpenSSL exploit (and the slapper worm that used it) and the apache chunked exploit were all on the front page. Front page stories were run on Lion/Ramen/etc also.
You apparently don't read Slashdot enough if you think they don't cover Linux worms in some attempt to make Linux look more secure than it is.
Funny that pretty much any "bash slashdot" post can get modded up, even if it is completely (and provably) false.
"Theft is stealing my bike" that we see on Slashdot.
Don't let those people detract from the real problems in copyright law. The DMCA goes too far. DRM could mean the end to the Internet as we know it. The public domain may never get any new works from expired copyrights... all these things are real problems, don't let rationalizations of copyright violators detract from these real problems that need action to reform.
---- Testicular asymmetry in human sculptures. "To test Winckelmann's claim, I observed the scrotal symmetry of 107 sculptures, either of antique origin or Renaissance copies, in a number of Italian museums and galleries. Although the ancient artists were correct in tending to place the right testicle higher, they were wrong in so far as they also tended to make the lower testicle the larger: we may postulate that they were also using the common-sense view that the heavier ought to be the lower." (McManus, I. C. 1976. Scrotal asymmetry in man and in ancient sculpture. Nature 259: 426)
20020059330 Method and apparatus for atomic file look-up. An atomic look-up operation allows an application to find out whether a file is opened atomically based on whether or not the file path is present in a file system namespace cache. If not, the file open request can be redirected, avoiding or minimizing impacts to the scheduling of various operations involved in executing an application. The request can be redirected by the application to a process that includes blocking point handling. An operating system according to the present invention includes a file system including a file system namespace, and an operating system kernel is operatively connected to the file system. The operating system kernel includes the file system namespace cache and the atomic look-up operation.
20020091868 Method and apparatus for handling communication requests at a server without context switching. An application protocol subsystem and protocol modules are disposed within an operating system kernel at a server. The protocol subsystem creates an "in-kernel" protocol stack that stores information regarding application protocol requests, such as HTTP and FTP requests, in a kernel request structure. A user space application can then continue execution while the operating system responds to the application protocol request without context switching. In this way, application protocol requests received over a network are handled and responded to by the server without causing a context switch.
--------- What has Red Hat done to cause you not to trust them? They are a solid GPL supporter, they don't play games like Lindows does with EULAs on GPL software. We have no reason to believe that they will do what they said, use these patents to protect open source, not hinder it.
They are not distributing the MP3 code because it opens them up to potential lawsuits. They are selling the code, along with distributing it freely, so Frauenwhosit just might have a problem with that, and decide a 200 million dollar bank account like Red Hat has, is a juicy target.
The openSSH sftp client really sucks, it's barely usable, no frills, almost seems like a "proof of concept" as it were. It gets the job done, barely.
So our customers need to upload files. With FTP in IE and Netscape and Mozilla, they can drag and drop the files into the browser and log in and send the files.
Another option is to use HTTP PUT, but since our clients are uploading 50 meg files, no progress feedback is a killer there. Is there some open source client-side-java-pretty-HTTP-PUT-uploader out there? Even then you have to have your clients have Java installed, something that can't really be counted on.
Other options.... Put putty on the site and make them install it and use sftp.. Not an ideal option, but somewhat workable.
So where is the drop in replacement for FTP? Why isn't anyone working on this?
mmmm... This message brought to you by the letters IBM and the Model M.
I love my IBM Model M. I think having greater tactile and audible feedback is really a great reducer of typing stress. We purchased some Micron slimline desktop systems at work, so we had some of the spare keyboards from them laying around the computer room. One of the servers had a keyboard with a sticky enter key that was driving me crazy, so a co-worker gave me one of the Micron keyboards to use instead.
Blah! Keyboards have become so wimpy that they move around with hardly any force, the keys are way too easy to press, and you have no feedback at all. It's almost like typing pantomime...
Luckily, I pick up old IBM keyboards with surprising regularity at the local Goodwill thrift shop. They sell them for $2-$3. My collection is growing nicely. Maybe one day I can open up a store and just deal in "they don't make it like they used to" kind of computer hardware.:)
Slashdot Mirror
It's not illegal to break into any system, do any kind of damage, and arrest using entrapment, as long as you're an agent of U.S. law enforcement,
Please!
There was no entrapment here. The Russian cracker broke in and stole credit card numbers...
Entrapment is enticing someone to commit a crime they would not otherwise be predisposed to do. There was no enticement to commit any crime here.
Comments like yours detract from the very real problems facing our freedom.
They lured him to the US by setting up a fake job interview. RTFA.
Standing up for the rights of Russian crackers to break into US banks and ecommerce sites to steal credit cards doesn't strike me as something that your congressperson will be very likely to do.
This case has only a slight relation to computers at all... It's more of a foreign policy matter. It's nothing like the Syklarov case. These were real criminals committing real crimes, stealing real money through fraud and computer intrusion.
Advice: Pick your battles.
Gorshkov was convicted a year ago on 20 counts of computer crimes, fraud and conspiracy after being accused of helping Alexey Ivanov steal credit card numbers from U.S. online banks, e-commerce companies and Internet service providers, the U.S. Attorney's office in Seattle said.
Let the Russian government and foreign policy pundits work this one out. This is nothing like the Skylarov case. These were real criminals committing real crimes.
I hate the government as much as the next guy, but give me a break!
Overall, a pretty dull interview, I could almost hear him yawning.
That's the way Linus always is in interviews with the press. I don't think this PR stuff really exictes him, especially since people are always asking about MS, something he really doesn't care about. He's told them over and over, he really doesn't care what MS is doing, as long as he can continue to make Linux better than Linux.
People always tend to ask kernel hackers about the latest desktop environments, or about things they really don't care much about other than as users of said applications.
It's like, imagine you worked on aircraft engines, even designed a revolutionary engine... and in interviews, people always asked you about the latest wing design and advances in providing high speed internet access to passengers... it's tangential to what you are interested in. You'd sound bored too.
Another thing, for those with Dish Network, scan up around the 9000 channels, and look for Washington University TV. Find the "business law" courses, and watch them. Good stuff.
So few Ask Slashdot questions can really be truly answered based just on the posted question,
- by-giving-half-assed-legal-advice.com, so these questions can never be answered.
There are only a few types of Ask Slashdot questions:
1. Ones where the question is answered in the first 5 posts, it's usually something a quick Google or Freshmeat search would have answered. These are also known as Cliffisms(tm).
2. One that asks for specific legal advice. Obviously this isn't free-lawyers-who-like-to-accept-tons-of-liability
3. One that asks something like this. Usually the scope is too broad to give a meaningful answer, but sometimes some good ideas get thrown about. This is probably the most interesting, but still not too effective usually, unless the scope of the question is just right, which is rare.
Well, these things generally go in cycles, if companies get too tight, they will fail, and more progressive companies will take their place as industry leaders. The market does work in large part.
We just need proper enforcement of laws that are already widely established. Fraud was always illegal. Fraud on a national scale is still something the federal government would have to be involved in. The constitution gives the federal government power to regulate interstate commerce.
If you look at the cause of a lot of the problems of the last two years, you will find rampant fraud on many levels. If it weren't for the criminal actions of thousands of businessmen, we wouldn't be in nearly as bad a situation right now.
The great thing about Libertarianism isn't just freedom, it's personal responsibility. A Libertarian government wouldn't be letting these CEOs and investment advisors go with a slap on the wrist, as some of them seem to be getting away with (however in the last few months, they have finally decided to come down hard on certain ones).
What's the use of industries making us crap and giving us paychecks if we've got no consumer rights?
Exactly. Without the government protecting industry through legislation, bribes, kickbacks, etc... We would have all the consumer rights we need.
Laws are the source of the problems in almost all cases, not the solution to the problem. Have you read the green party platform? It's like 200 pages and outlines a very regulated and restricted society. Less government is the answer, not more.
Libertarians are the only people that would protect your rights by allowing the free market to work the way it was supposed to. A common myth is that Libertarians would let monopolies abuse consumers. Any true advocate of the free market realizes the damage that monopolies cause. The government wouldn't be completely impotent under a more Libertarian society, it would only be reduced to levels that would let the free market solve these problems.
Off the top of my head, here's [securityfocus.com] one.
A bug in Slash isn't newsworthy. Everyone knows Slash is a hacked together mess of perl scripts. PHPNuke is equally messy and bug-ridden, and has had dozens of alerts against it, and it is more widely used than Slash. Still, any of these third party apps have tiny installation numbers compared to something like IIS or Bind or Apache. You can't expect Slashdot to cover every security alert on every piece of software.
If you want to be on top of security issues, follow SecurityFocus, not Slashdot.
I do (bugtraq, incidents, focus-linux, forensics), and almost always, Slashdot covers all major vulernabilities that I see on the lists, in Windows based software and in Linux.
The only thing they don't regularly cover is incidents, even if they are major incidents. There have been a couple incidents that I submitted to Slashdot and I think should have been posted, but weren't.
But I'll be fucked if I understand why Slashdot does this sort of thing
I'll admit the editors are a little biased, but after all, this IS a free software centered site. All news sites have bias. As far as the posters go, you can't hold the editors accountable for what the posters post.
He's always for the consumer rights
Yeah, as long as the consumer doesn't happen to work for an evil corporation, or worse yet, owns his or her own evil corporation, or maybe evil corporations might pay his bills by being his or her customer.
What's the use of consumer rights after industry is hindered to the point that no one has any money left to spend?
No wonder you're on my foes list
:)
Heh, that's like the second or third time you have said that.
I'm glad to reaffirm your view of me.
God Bless, and a fond fuck you!
(It's only Slashdot man, lighten up)
What is "sftp"?
It's a standard part of the SSH suite that acts similar to ftp, you browse the files and download them and such. Really if you don't even know what sftp is, you don't have much room to comment.
Yeah but Java/Javascript/ActiveX at least had some forethought about security. Hacking Outlook to execute VBS code seemed to be an incredibly stupid move, only something that a braindead company like MS would do.
Most AV vendors have an email address you can send suspected malicious code to. Also, some large companies have expensive AV contracts, and a lot get found that way.
The OpenSSL exploit (and the slapper worm that used it) and the apache chunked exploit were all on the front page. Front page stories were run on Lion/Ramen/etc also.
3 1. shtml?tid=148= 02/09/25/121024 7&mode=thread&tid=148/ article.pl?sid=02/09/13 /2315246&mode=thread&tid=172l ashdot.org/article.pl?sid=02/0 7/30/1323226&mode=thread&tid=128
You apparently don't read Slashdot enough if you think they don't cover Linux worms in some attempt to make Linux look more secure than it is.
Funny that pretty much any "bash slashdot" post can get modded up, even if it is completely (and provably) false.
http://apache.slashdot.org/apache/02/06/28/1812
http://slashdot.org/article.pl?sid
http://apache.slashdot.org
http://developers.s
Only that those unixish programs you mention are server daemons, not client software.
Windows has inherently flawed security.
"Theft is stealing my bike" that we see on Slashdot.
Don't let those people detract from the real problems in copyright law. The DMCA goes too far. DRM could mean the end to the Internet as we know it. The public domain may never get any new works from expired copyrights... all these things are real problems, don't let rationalizations of copyright violators detract from these real problems that need action to reform.
Is counterfeiting money stealing?
No, but actually using counterfeit money is committing fraud, a form of theft. Bad analogy.
this would go a long way toward getting me an innocent-til-proven-guilty approach,
I think this pretty much sums up everything that is wrong with the system.
A link to goatse would be finally on-topic!
----
Testicular asymmetry in human sculptures. "To test Winckelmann's claim, I observed the scrotal symmetry of 107 sculptures, either of antique origin or Renaissance copies, in a number of Italian museums and galleries. Although the ancient artists were correct in tending to place the right testicle higher, they were wrong in so far as they also tended to make the lower testicle the larger: we may postulate that they were also using the common-sense view that the heavier ought to be the lower." (McManus, I. C. 1976. Scrotal asymmetry in man and in ancient sculpture. Nature 259: 426)
We have no reason to believe that they will do what they said,
Uh, I meant "won't"... damned double negatives.
20020059330
Method and apparatus for atomic file look-up. An atomic look-up operation allows an application to find out whether a file is opened atomically based on whether or not the file path is present in a file system namespace cache. If not, the file open request can be redirected, avoiding or minimizing impacts to the scheduling of various operations involved in executing an application. The request can be redirected by the application to a process that includes blocking point handling. An operating system according to the present invention includes a file system including a file system namespace, and an operating system kernel is operatively connected to the file system. The operating system kernel includes the file system namespace cache and the atomic look-up operation.
20020091868
Method and apparatus for handling communication requests at a server without context switching. An application protocol subsystem and protocol modules are disposed within an operating system kernel at a server. The protocol subsystem creates an "in-kernel" protocol stack that stores information regarding application protocol requests, such as HTTP and FTP requests, in a kernel request structure. A user space application can then continue execution while the operating system responds to the application protocol request without context switching. In this way, application protocol requests received over a network are handled and responded to by the server without causing a context switch.
---------
What has Red Hat done to cause you not to trust them? They are a solid GPL supporter, they don't play games like Lindows does with EULAs on GPL software. We have no reason to believe that they will do what they said, use these patents to protect open source, not hinder it.
They are not distributing the MP3 code because it opens them up to potential lawsuits. They are selling the code, along with distributing it freely, so Frauenwhosit just might have a problem with that, and decide a 200 million dollar bank account like Red Hat has, is a juicy target.
So what to do with FTP?
The openSSH sftp client really sucks, it's barely usable, no frills, almost seems like a "proof of concept" as it were. It gets the job done, barely.
So our customers need to upload files. With FTP in IE and Netscape and Mozilla, they can drag and drop the files into the browser and log in and send the files.
Another option is to use HTTP PUT, but since our clients are uploading 50 meg files, no progress feedback is a killer there. Is there some open source client-side-java-pretty-HTTP-PUT-uploader out there? Even then you have to have your clients have Java installed, something that can't really be counted on.
Other options.... Put putty on the site and make them install it and use sftp.. Not an ideal option, but somewhat workable.
So where is the drop in replacement for FTP? Why isn't anyone working on this?
mmmm... This message brought to you by the letters IBM and the Model M.
:)
I love my IBM Model M. I think having greater tactile and audible feedback is really a great reducer of typing stress. We purchased some Micron slimline desktop systems at work, so we had some of the spare keyboards from them laying around the computer room. One of the servers had a keyboard with a sticky enter key that was driving me crazy, so a co-worker gave me one of the Micron keyboards to use instead.
Blah! Keyboards have become so wimpy that they move around with hardly any force, the keys are way too easy to press, and you have no feedback at all. It's almost like typing pantomime...
Luckily, I pick up old IBM keyboards with surprising regularity at the local Goodwill thrift shop. They sell them for $2-$3. My collection is growing nicely. Maybe one day I can open up a store and just deal in "they don't make it like they used to" kind of computer hardware.