'Q2 had several releases forced out because of malicious attacks on all the public servers'.
Uh, maybe this was because 'ID software blatantly put a backdoor in Quake 1/2 and QuakeWorld including both the Linux/Solaris Quake2. RCON commands sent from the subnet 192.246.40.0/24 and containing the password "tms" are automaticly executed on the server without being logged.'
'Vulnerable Systems: Those running Quake 1, QuakeWorld, Quake 2, Quake 2 Linux and Quake 2 Solaris, all versions. Thus many Windows and UNIX boxes are affected.'
'Compromise: root (remote).'
'Notes: Quake was always a horrible security hole, but I never thought Id would stoop to introducing an intentional backdoor to allow them access to systems running Quake. I am surprised this didn't get more publicity.'
The exploit was discovered by Mark Zielinski and is documented at www.insecure.org. You can find the fix here, but if you're looking for a patch, dream on...
1. Another slap in the face for us cookiephobic conshies. I can't be alone in associating cookies with ASP and all things Microsoft - maybe it's the way you can't turn them off in IE3. It's a freedom thing. Anyway the cookie crumbs'll be all over your smug face when M$ patent them à la CSS/doorknobs. Would it kill you to propagate that smidgeon of state in a munged URL? Pre-cookie browsers? It's not as though - judging by your workrate of late - you're afraid of a good hard hack. It's possible to be a model Slashdotter - a 24/7 unanonymous lurker - without actually being logged in.
2. Personally, I like the "What did you think of this article?" radiobuttons ("Not worth reading","Worth reading","Very worth reading") on JavaWorld. If every comment had one of these you'd soon sort the clueful from the Kiplings. People would only vote for the ones they rated or hated because it's such a pain in the Gates to interrupt your clickstream. As for the number of moderators - why arbitrarily limit it? As someone posted earlier, it's much easier to let everyone have moderation power equal to their running approval rating. What is it ESR says about egoboo and geek credits? Words made flesh - or rather code: the more votes you receive the more you can spend. Simple to implement - well, simple for me to say at any rate:-) - and self-regulating.
3. Geek du jour, jwz, once posted a defence of some earlier eroded liberty - was it the noble right to anonymity? - where he basically said: if you assume people are gonna abuse the system they will. Treat people like original sinners and they'll crack open a few misdemeanours just so as not to let you down. Too many precautions against the dark side and you start to squeeze the force.
4. Props for what you've done so far. It's good. It's getting better. One in the eye for those who thought Signal v Noise would end in a penalty shootout.
Rob, you (and Nate) have already devised an artificially-intelligent self-moderating collaborative-filtering serendipity machine - it's called Everything, and it works a treat. Why not glue both hemispheres of your brain together and let Slashdot and Everything get married? An Everythingized Slashdot would make a great custom option: i.e. people who clicked on/liked/voted for/highly rated this article/post also liked this one. Code reuse.
Time for Luke Slashdot to get jiggy with his sister.
Well, they're not heinous. But personally, I prefer AJP's take on kicking the iMac's multicolored ass. Can you say post-laptop? GhettoSurfer? Beachtop? Shame they've stuck a computer inside it. Almost worth buying just to gut it and whack in a thermonuclear Celery.
P.S. It's beige, but, hey, that's what paint's for.
Slashdot Mirror
'Q2 had several releases forced out because of malicious attacks on all the public servers'.
Uh, maybe this was because 'ID software blatantly put a backdoor in Quake 1/2 and QuakeWorld including both the Linux/Solaris Quake2. RCON commands sent from the subnet 192.246.40.0/24 and containing the password "tms" are automaticly executed on the server without being logged.'
'Vulnerable Systems: Those running Quake 1, QuakeWorld, Quake 2, Quake 2 Linux and Quake 2 Solaris, all versions. Thus many Windows and UNIX boxes are affected.'
'Compromise: root (remote).'
'Notes: Quake was always a horrible security hole, but I never thought Id would stoop to introducing an intentional backdoor to allow them access to systems running Quake. I am surprised this didn't get more publicity.'
The exploit was discovered by Mark Zielinski and is documented at www.insecure.org. You can find the fix here, but if you're looking for a patch, dream on...
That'll be GroupLens.
1. Another slap in the face for us cookiephobic conshies. I can't be alone in associating cookies with ASP and all things Microsoft - maybe it's the way you can't turn them off in IE3. It's a freedom thing. Anyway the cookie crumbs'll be all over your smug face when M$ patent them à la CSS/doorknobs. Would it kill you to propagate that smidgeon of state in a munged URL? Pre-cookie browsers? It's not as though - judging by your workrate of late - you're afraid of a good hard hack. It's possible to be a model Slashdotter - a 24/7 unanonymous lurker - without actually being logged in.
:-) - and self-regulating.
2. Personally, I like the "What did you think of this article?" radiobuttons ("Not worth reading","Worth reading","Very worth reading") on JavaWorld. If every comment had one of these you'd soon sort the clueful from the Kiplings. People would only vote for the ones they rated or hated because it's such a pain in the Gates to interrupt your clickstream. As for the number of moderators - why arbitrarily limit it? As someone posted earlier, it's much easier to let everyone have moderation power equal to their running approval rating. What is it ESR says about egoboo and geek credits? Words made flesh - or rather code: the more votes you receive the more you can spend. Simple to implement - well, simple for me to say at any rate
3. Geek du jour, jwz, once posted a defence of some earlier eroded liberty - was it the noble right to anonymity? - where he basically said: if you assume people are gonna abuse the system they will. Treat people like original sinners and they'll crack open a few misdemeanours just so as not to let you down. Too many precautions against the dark side and you start to squeeze the force.
4. Props for what you've done so far. It's good. It's getting better. One in the eye for those who thought Signal v Noise would end in a penalty shootout.
Time for Luke Slashdot to get jiggy with his sister.
P.S. It's beige, but, hey, that's what paint's for.