There's still time for Micron or Samsung or someone else to buy it and kill it to prevent it from crushing their business model of slowly releasing marginally better stuff every month. Definitely still in vaporware territory.
You bet! And what it failed to mention is that your tor browser bundle would have to be at least 6 months old since every monthly Firefox release is followed by a new Tor browser bundle release containing the new version. Plus, every time you open the Tor browser version of Firefox, it warns you if it's out of date in gigantic colored letters.
Hey, remember that article stating you won't be able to turn Javascript off in an upcoming version of Firefox? Hopefully this incident is enough to get them to pull their heads out of their asses. Also, this proves what everyone knew to be true; that Firefox's alleged "corporate stable release" is just a meaningless title and you're running a version with a bunch of unpatched vulnerabilities.
From TFA:
"People using Linux and OS X were not affected, but that doesn't mean they couldn't be targeted in the future. This wasn't the first Firefox vulnerability, nor will it be the last."
So....no. It wasn't even a Windows exploit, actually. It was a firefox exploit that happened to only work on Windows but it's equally likely any future flaws will not be platform dependent. What you should do is stay on Windows and just update your damn Tor browser bundle when a new one is released.
From what I heard, the flaw affects Firefox 17 and the latest browser bundle is 22 and javascript has to be on, which is technically isn't because of noscript being on by default. Also, since it's Firefox and javscript and cookies, it's actually platform independent so switching off of Windows will do absolutely nothing to prevent this type of attack. Great article!
"depending on customer demand."
I demand that they stop price fixing SSDs and RAM just because Windows 8 is selling like crap. Once a 500GB SSD is a reasonable price, I'll pick one up and they'll put Seagate and WD out of business completely. What the hell are they waiting for, sitting back and making ridiculous profits in the short term instead?
They seem to be forgetting that the US invented the internet. We developed it from scratch with very little outside help. We're just borrowing/leasing/selling our own invention to the rest of the world who, in return, acts like they're entitled to it as a basic human right. It's just a tech invention, not freedom of speech or water or any other such important resource or right.
If anyone else used exploits to screw with people, it would be called hacking and they'd probably go to prison, but when the FBI does it, it's 'okay.'
Actually, a judge has yet to find whether it's OK or not. The admissibility of the evidence in these cases is going to hinge on whether or not it was collected through legal means. And no matter which way the judge finds, the loser is going to appeal. As far as I know, this is all untested legal ground.
They reeeeally set this up to go down worse than that gun-selling tracing thing that went horribly.
Looks very much like the three letter agencies decided it's time now to start playing hardball.
Really? Firefox 17 (tor browser bundle uses 22) and a non-tor wrapped browser hybrid thing (hello, browser bundle much?), and with javascript purposely turned back on since it's off by default? That will catch zero people. Certainly not worth bending the rules and pissing everyone off for.
This is the most surprising story I've ever read. I'm all about the feds finally growing some balls and using whatever techniques necessary to arrest some scumbags but this could easily be the tip of the iceberg given all the NSA crap going on. If they feel like they can do anything, they will and it's a slippery slope. In this particular case, I'm glad they finally stopped letting those losers hide behind legal BS.
BUT, seriously, who the hell would use TOR on a browser and then use it for non-tor stuff? I didn't know that was even possible given how the tor browser bundle works. This is seriously going to catch like zero people, lol. But A+ for effort. Then again, some pedos are notoriously dumb.
I'm kinda mad that tormail is down though. That was a huge privacy/anti-NSA tool. Obviously they took that down on purpose as "collateral" just so it's gone. That sucks.
I'm from Wisconsin and I visited LA a bit ago. I soooo wanted to hail a cab but nope, someone told me that's illegal. WTF?! They said too many cabbies are getting robbed. Whaaaaat? So instead you call them from any untraceable or spoofed number, tell them to meet you in a more opportune dark side alley in a bad neighborhood for a pickup, and then definitely don't rob them. What kind of idiot made that law that now makes us use services like Uber? I'm glad I live in a 100,000 person city. Okay, so we still have cabs but you call on the phone for them just because they're not just driving around.
Actually, lasers travel through space a lot better than through our thick atmosphere. Moving air, temperature changes, and water vapor all disrupt lasers much more than radio waves. It's only good in short distances or space.
"a spike in assaults, rapes and murders during heatwaves"
Ummm it's way too hot outside to assault, rape, or murder anyone actually. This cannot be a correct correlation.
Asian quality standards. That explains everything. Now every damn thing is outsourced from the image design to the market research to the engineering to the testing and asian companies' quality standards are a joke. If they want a good product, it has to be developed elsewhere.
They just keep making the same mistake 10+ times, don't they? THIS TIME hire an actor that will sign a 10 year contract and shows intent to actually stay with the show. In England, the actor who plays Doctor Who is the highest level of attainable status, one level higher than the queen herself. But nope, the last asshole thought "maybe I can do better" or "I just need to be making less money" or "I like movies better" and dropped out after a mere, what 2 or 3 years? Pathetic. Definitely a slap in the face to fans. So this time, I really don't care who it is as long as they actually stay with the series.
You're right, I'm scheduling pressure cooker bomb awareness week in my workplace ASAP. Then we can learn the minute, actually imperceptible difference between a pot-luck lunch pressure cooker and a bomb and save everyone from either explosions or chilli.
"He's optimistic about the coming console cycle, commenting that it's 'obviously going to be a good thing for gamers, developers, and an excellent thing for AMD"
Well then he's an idiot who lives in his own little fake reality because that sure as hell isn't what's happening.
Everyone at my work over 40 can't see a damn thing so their 1920x1080 monitors are at 1280x800. That awful pixel shrink ratio results in blurry crap which is almost as difficult to read. If the resolution was 10x higher, it would be a lot less noticeable because larger resolution pixel blurs would be possible. So no, they should keep increasing it.
We should all take this time to remember the brave folks who, thousands of years ago, had to self destruct their crab-class starship to save the universe from the Daleks.
When have they ever given a flying fuck about their customers' opinions on any stupid new thing they do? They aren't launching it because the income projections from it aren't high enough.
If anything, this benefits MS. They've hopefully learned and adapted to:
Use semi-monopoly to force stupid crap that customers don't want down people's throats = less money, benefits the competition by losing sales
Give people what the market research says they actually want = more money, hurts the competition by losing them sales
If this is the beginning of them pulling their heads out of their asses, this is not good for Linux at all.
Slashdot Mirror
There's still time for Micron or Samsung or someone else to buy it and kill it to prevent it from crushing their business model of slowly releasing marginally better stuff every month. Definitely still in vaporware territory.
It never hurts to have sun polar flipping insurance though
You bet! And what it failed to mention is that your tor browser bundle would have to be at least 6 months old since every monthly Firefox release is followed by a new Tor browser bundle release containing the new version. Plus, every time you open the Tor browser version of Firefox, it warns you if it's out of date in gigantic colored letters.
Hey, remember that article stating you won't be able to turn Javascript off in an upcoming version of Firefox? Hopefully this incident is enough to get them to pull their heads out of their asses. Also, this proves what everyone knew to be true; that Firefox's alleged "corporate stable release" is just a meaningless title and you're running a version with a bunch of unpatched vulnerabilities.
From TFA:
"People using Linux and OS X were not affected, but that doesn't mean they couldn't be targeted in the future. This wasn't the first Firefox vulnerability, nor will it be the last."
So....no. It wasn't even a Windows exploit, actually. It was a firefox exploit that happened to only work on Windows but it's equally likely any future flaws will not be platform dependent. What you should do is stay on Windows and just update your damn Tor browser bundle when a new one is released.
From what I heard, the flaw affects Firefox 17 and the latest browser bundle is 22 and javascript has to be on, which is technically isn't because of noscript being on by default. Also, since it's Firefox and javscript and cookies, it's actually platform independent so switching off of Windows will do absolutely nothing to prevent this type of attack. Great article!
"depending on customer demand."
I demand that they stop price fixing SSDs and RAM just because Windows 8 is selling like crap. Once a 500GB SSD is a reasonable price, I'll pick one up and they'll put Seagate and WD out of business completely. What the hell are they waiting for, sitting back and making ridiculous profits in the short term instead?
Because some people are viewing with open source, half working, alpha release hippie browsers that don't support UTF-8 so they can't implement it.
They seem to be forgetting that the US invented the internet. We developed it from scratch with very little outside help. We're just borrowing/leasing/selling our own invention to the rest of the world who, in return, acts like they're entitled to it as a basic human right. It's just a tech invention, not freedom of speech or water or any other such important resource or right.
and they all work for me because I pay taxes and vote so I hire them and pay them. Aaaaand they're all fired, lol.
If anyone else used exploits to screw with people, it would be called hacking and they'd probably go to prison, but when the FBI does it, it's 'okay.'
Actually, a judge has yet to find whether it's OK or not. The admissibility of the evidence in these cases is going to hinge on whether or not it was collected through legal means. And no matter which way the judge finds, the loser is going to appeal. As far as I know, this is all untested legal ground.
They reeeeally set this up to go down worse than that gun-selling tracing thing that went horribly.
Looks very much like the three letter agencies decided it's time now to start playing hardball.
Really? Firefox 17 (tor browser bundle uses 22) and a non-tor wrapped browser hybrid thing (hello, browser bundle much?), and with javascript purposely turned back on since it's off by default? That will catch zero people. Certainly not worth bending the rules and pissing everyone off for.
This is the most surprising story I've ever read. I'm all about the feds finally growing some balls and using whatever techniques necessary to arrest some scumbags but this could easily be the tip of the iceberg given all the NSA crap going on. If they feel like they can do anything, they will and it's a slippery slope. In this particular case, I'm glad they finally stopped letting those losers hide behind legal BS.
BUT, seriously, who the hell would use TOR on a browser and then use it for non-tor stuff? I didn't know that was even possible given how the tor browser bundle works. This is seriously going to catch like zero people, lol. But A+ for effort. Then again, some pedos are notoriously dumb.
I'm kinda mad that tormail is down though. That was a huge privacy/anti-NSA tool. Obviously they took that down on purpose as "collateral" just so it's gone. That sucks.
I'm from Wisconsin and I visited LA a bit ago. I soooo wanted to hail a cab but nope, someone told me that's illegal. WTF?! They said too many cabbies are getting robbed. Whaaaaat? So instead you call them from any untraceable or spoofed number, tell them to meet you in a more opportune dark side alley in a bad neighborhood for a pickup, and then definitely don't rob them. What kind of idiot made that law that now makes us use services like Uber? I'm glad I live in a 100,000 person city. Okay, so we still have cabs but you call on the phone for them just because they're not just driving around.
Actually, lasers travel through space a lot better than through our thick atmosphere. Moving air, temperature changes, and water vapor all disrupt lasers much more than radio waves. It's only good in short distances or space.
"a spike in assaults, rapes and murders during heatwaves"
Ummm it's way too hot outside to assault, rape, or murder anyone actually. This cannot be a correct correlation.
Asian quality standards. That explains everything. Now every damn thing is outsourced from the image design to the market research to the engineering to the testing and asian companies' quality standards are a joke. If they want a good product, it has to be developed elsewhere.
They just keep making the same mistake 10+ times, don't they? THIS TIME hire an actor that will sign a 10 year contract and shows intent to actually stay with the show. In England, the actor who plays Doctor Who is the highest level of attainable status, one level higher than the queen herself. But nope, the last asshole thought "maybe I can do better" or "I just need to be making less money" or "I like movies better" and dropped out after a mere, what 2 or 3 years? Pathetic. Definitely a slap in the face to fans. So this time, I really don't care who it is as long as they actually stay with the series.
You're right, I'm scheduling pressure cooker bomb awareness week in my workplace ASAP. Then we can learn the minute, actually imperceptible difference between a pot-luck lunch pressure cooker and a bomb and save everyone from either explosions or chilli.
"He's optimistic about the coming console cycle, commenting that it's 'obviously going to be a good thing for gamers, developers, and an excellent thing for AMD"
Well then he's an idiot who lives in his own little fake reality because that sure as hell isn't what's happening.
Perhaps the lesson is don't search for a pressure cooker bomb at work, dumbass.
Everyone at my work over 40 can't see a damn thing so their 1920x1080 monitors are at 1280x800. That awful pixel shrink ratio results in blurry crap which is almost as difficult to read. If the resolution was 10x higher, it would be a lot less noticeable because larger resolution pixel blurs would be possible. So no, they should keep increasing it.
We should all take this time to remember the brave folks who, thousands of years ago, had to self destruct their crab-class starship to save the universe from the Daleks.
When have they ever given a flying fuck about their customers' opinions on any stupid new thing they do? They aren't launching it because the income projections from it aren't high enough.
Security researcher or enthusiast rule #1: if you're going to try and frame someone or whatever, don't fucking post about it on the public internet
If anything, this benefits MS. They've hopefully learned and adapted to:
Use semi-monopoly to force stupid crap that customers don't want down people's throats = less money, benefits the competition by losing sales
Give people what the market research says they actually want = more money, hurts the competition by losing them sales
If this is the beginning of them pulling their heads out of their asses, this is not good for Linux at all.