The m4p files are still encrypted on the iPod, they are just encrypted with the iPod's key instead of the PC's key. Yes, you can copy files to any iPod from anyone's iTunes collection (so long as that song is registered with that copy if iTunes), but have you tried to get such an m4p file back off the iPod again? Even if you could just copy the m4p back off, it'd be encrypted with the iPod key instead of the PC key.
-Serp
Re:Security Threat of USB Flash Drives
on
USB Swiss Army Knife
·
· Score: 2, Informative
Perhaps the controls you get in Windows will let you do such a thing, but I do know that in Linux, it's as easy as removing access to the USB Mass Storage modules. In the simplest case, don't let them be auto-loaded via hotplug, and don't give the user's access to load them manually.
Re:What an overelaborate scheme...
on
Fake ATM Fraud Expose
·
· Score: 2, Insightful
But, when you lose your wallet, you are likely to report the card as missing/stolen a lot quicker. With magnetic stripe theft, most people won't notice money missing until their next statement.
Or, worse yet, people who bring their laptops home (with no firewalls, since one isn't needed at work - corporate lan), get latest worm, and come in the next day only to infect every other machine (since no one has firewalls).
The biggest threat around here is from the inside.
There is nothing wrong about being a wrapper around a native toolkit (gtk), but being a wrapper around a non-native toolkit (awt) just leaves a bad taste in my mouth. No matter which "skin" I apply, the java application always looks a little off, behaves a little differently, and just "doesn't fit".
I, for one, never let something as sparsely done as grepping my code for the control structure get in the way of something I frequently do, and that's "read the source code".
It just plain hurts my eyes to not see that open curly on a new line all by itself. I won't even let comments exist with it.
The p2p apps I've used (Kazaa comes to mind) download from multiple places already. All BitTorrent does is guarantee that while you download, your bits are available for upload to others. Some p2p's may do that, but in Kazaa, you only upload what you explicitly share.
For a desktop linux distribution, I run Mandrake. Currently, I'm running Mandrake 9.1.
Let's say that today, I want to install a common package that I don't have, but want to use, like kismet, the wireless sniffer (http://www.kismetwireless.net).
Now you, compile it from source. How long did it take?
Now, I realize that kismet is something that someone else packaged up specifically for Mandrake 9.1, and it happens to be in the contrib section on a mirror for me. But, so is tons of other *common* software, and it's all that easy to install (yet, full dependencies included).
Of course, if I want to install something that isn't built for Mandrake 9.1, I can compile it from source just like you. But that's not slower either. In fact, if I spend an extra few minutes making an RPM out of it (granted some sources are harder to make into RPMs quickly), I can not only install it easily on this and any other Mandrake 9.1 machine I want it on, but I can also uninstall it, and upgrade it, with full dependency checking.
Obviously they had source code access. That's the way reasoning works - their program reads in and parses the source code, generates a parse tree, and then analyzes that. That's why it's called "static analysis" - no binaries, runtimes, or testcases are needed, and errors can even be found in code that is never excercised.
My answering machine always says '0' too, but I wish it didn't. Of course, here I am, replying to a slashdot post, so I don't think that's going to change in the near future.
Re:The problem with Gentoo
on
Gentoo Reviewed
·
· Score: 2, Interesting
Slackware is aptly named; it's for people who want things to work simply and without a lot of effort.
Ok, I must be missing something. Every so often I read something like this, and I think, "I'll give Slackware another try, maybe in this new version things work better".
What am I missing? I can't install things easily at all - I have the same stupid problem that I've always had - you want to install package X? You better go download packages Y and Z. Oh, but Z depends on A and B. You have B, but it's not new enough. Can you upgrade it? Maybe. What if C depends on the old B? How do you know? Do you upgrade B or install the newer one along side of the old one?
Confused? So was I, so I never get very far with Slackware. I hated RPM-based distros for this game too, until I found urpmi
for Mandrake. Yeah, it comes with it, and it's like apt-get for RPMS. I would have used Debian because it handles all of this too, but I was already used to RPMs and Mandrake, and once I found urpmi, I was set.
What is so appealing about Slackware? Maybe it makes a good server distribution where you keep track of everything you install, and you never install much, so you don't need to worry about this. I just never understood it.
Using Slackware, to me, is like having to think about salivating before you eat, so the food doesn't stick in your throat. Who wants to micro-manage things like that unless it's a mission critical server? (Which may be the only place Slackware makes sense...).
It just redirects the client making the request to try and load the given page from the local machine. Assuming that the client making the request (the worm) understands redirections, that line makes it attempt to load 127.0.0.1 (the local IIS server that the worm infected) with a URL that will exploit the local worm (hehe) and use rundll32 to shut down the client's windows machine.
If it works, it's brilliant. I'm not sure the worm reads redirects, though. Anyone actually witness this working?
Anyone remember metasquares? It was a free game on AOL maybe 6 years ago, and it was one of the funnest online games I ever played. Then they cancelled it. That's ok, I learned something about computers after that, and that was the end of AOL.
Slashdot Mirror
you would be better off just buying a cheap computer, a very large hard drive, and a touch screen LCD off of ebay
Unless you want to get out of your car, walk away, and still be able to listen to your music. (No, I'm not suggesting bigger speakers in your car).
Actually, the iPod *does* have DRM.
The m4p files are still encrypted on the iPod, they are just encrypted with the iPod's key instead of the PC's key. Yes, you can copy files to any iPod from anyone's iTunes collection (so long as that song is registered with that copy if iTunes), but have you tried to get such an m4p file back off the iPod again? Even if you could just copy the m4p back off, it'd be encrypted with the iPod key instead of the PC key.
-Serp
Perhaps the controls you get in Windows will let you do such a thing, but I do know that in Linux, it's as easy as removing access to the USB Mass Storage modules. In the simplest case, don't let them be auto-loaded via hotplug, and don't give the user's access to load them manually.
Hi Tim :)
But, when you lose your wallet, you are likely to report the card as missing/stolen a lot quicker. With magnetic stripe theft, most people won't notice money missing until their next statement.
Or, worse yet, people who bring their laptops home (with no firewalls, since one isn't needed at work - corporate lan), get latest worm, and come in the next day only to infect every other machine (since no one has firewalls).
The biggest threat around here is from the inside.
Should have enabled the built-in XP firewall before going online...
create a C language parser that reduced the C-code down to op codes
like gcc?
To me, it sounds like the Dr. Seuss Computer Manual
This is what i means to me...
... }
for( i = 0; i < strlen(some_string); i++ ) {
-Serp
My applications do this too. As soon as I install them, I get optimized binaries for my architecture, and fast load times.
Check it out.
In fact, the particular system I run has been doing this for a long, long time.
Of course, I can imagine that it would be useful to make this transparent to both the programmer and the end user, but I digress.
When they say "keywords", I'm sure they meant "functions in the global namespace".
There is nothing wrong about being a wrapper around a native toolkit (gtk), but being a wrapper around a non-native toolkit (awt) just leaves a bad taste in my mouth. No matter which "skin" I apply, the java application always looks a little off, behaves a little differently, and just "doesn't fit".
Or, grep -B1...
I, for one, never let something as sparsely done as grepping my code for the control structure get in the way of something I frequently do, and that's "read the source code".
It just plain hurts my eyes to not see that open curly on a new line all by itself. I won't even let comments exist with it.
If they percieved this to really be a problem, they would do two things:
(1) Add a headphone jack
(2) Make the line-in hidden by a small panel or something
This way, the clearly labeled headphone jack wouldn't confuse anyone, and those of us who wanted the line-in jack would be able to use it too.
The p2p apps I've used (Kazaa comes to mind) download from multiple places already. All BitTorrent does is guarantee that while you download, your bits are available for upload to others. Some p2p's may do that, but in Kazaa, you only upload what you explicitly share.
-Serp
How do you know the parent is a girl?
--Melissa
I'll bite.
/ distribu tions/Mandrake/9.1/contrib/RPMS/kismet-2.8.1-2mdk. i586.rpm /var/cache/urpmi/rpms/kismet-2.8.1-2mdk.i586.rpm
For a desktop linux distribution, I run Mandrake. Currently, I'm running Mandrake 9.1.
Let's say that today, I want to install a common package that I don't have, but want to use, like kismet, the wireless sniffer (http://www.kismetwireless.net).
So, this is what I do:
# urpmi kismet
and how long does it take?
# time urpmi kismet
ftp://ftp.club-internet.fr/pub/unix/linux
installing
Preparing...
(Lameness filter hashes)
1:kismet
(Lameness filter hashes)
3.61user 1.13system 0:28.03elapsed 16%CPU
Yeah, that's 28 seconds.
Now you, compile it from source. How long did it take?
Now, I realize that kismet is something that someone else packaged up specifically for Mandrake 9.1, and it happens to be in the contrib section on a mirror for me. But, so is tons of other *common* software, and it's all that easy to install (yet, full dependencies included).
Of course, if I want to install something that isn't built for Mandrake 9.1, I can compile it from source just like you. But that's not slower either. In fact, if I spend an extra few minutes making an RPM out of it (granted some sources are harder to make into RPMs quickly), I can not only install it easily on this and any other Mandrake 9.1 machine I want it on, but I can also uninstall it, and upgrade it, with full dependency checking.
Compile everything from source? Hah!
Static analysis catches so much more than simple compiler syntactic analysis.
For example, this can be caught easily by the compiler:
int foo(int bar)
{
int a;
return bar + a;
}
But this requires a deeper analysis:
int foo(int bar)
{
int a = 0;
int b;
if(bar > 0)
{
a = bar;
b = bar - a;
}
if(a == 0)
{
a += b;
}
return a;
}
Obviously they had source code access. That's the way reasoning works - their program reads in and parses the source code, generates a parse tree, and then analyzes that. That's why it's called "static analysis" - no binaries, runtimes, or testcases are needed, and errors can even be found in code that is never excercised.
My answering machine always says '0' too, but I wish it didn't. Of course, here I am, replying to a slashdot post, so I don't think that's going to change in the near future.
Slackware is aptly named; it's for people who want things to work simply and without a lot of effort.
Ok, I must be missing something. Every so often I read something like this, and I think, "I'll give Slackware another try, maybe in this new version things work better".
What am I missing? I can't install things easily at all - I have the same stupid problem that I've always had - you want to install package X? You better go download packages Y and Z. Oh, but Z depends on A and B. You have B, but it's not new enough. Can you upgrade it? Maybe. What if C depends on the old B? How do you know? Do you upgrade B or install the newer one along side of the old one?
Confused? So was I, so I never get very far with Slackware. I hated RPM-based distros for this game too, until I found urpmi for Mandrake. Yeah, it comes with it, and it's like apt-get for RPMS. I would have used Debian because it handles all of this too, but I was already used to RPMs and Mandrake, and once I found urpmi, I was set.
What is so appealing about Slackware? Maybe it makes a good server distribution where you keep track of everything you install, and you never install much, so you don't need to worry about this. I just never understood it.
Using Slackware, to me, is like having to think about salivating before you eat, so the food doesn't stick in your throat. Who wants to micro-manage things like that unless it's a mission critical server? (Which may be the only place Slackware makes sense...).
Does anyone have an answer to this?
Thanks for spoiling it!
SHITE!
No warning or nothing. You just came out and said it.
Oh man, that's awesome. Kudos.
It just redirects the client making the request to try and load the given page from the local machine. Assuming that the client making the request (the worm) understands redirections, that line makes it attempt to load 127.0.0.1 (the local IIS server that the worm infected) with a URL that will exploit the local worm (hehe) and use rundll32 to shut down the client's windows machine.
If it works, it's brilliant. I'm not sure the worm reads redirects, though. Anyone actually witness this working?
Anyone remember metasquares? It was a free game on AOL maybe 6 years ago, and it was one of the funnest online games I ever played. Then they cancelled it. That's ok, I learned something about computers after that, and that was the end of AOL.